RedHat Security Advisory RHSA-2009:1642

The remote host is missing updates announced in advisory RHSA-2009:1642. acpid is a daemon that dispatches ACPI Advanced Configuration and Power Interface events to user-space programs. It was discovered that acpid could create its log file /var/log/acpid with random permissions on some systems. ...

RedHat Security Advisory RHSA-2009:1635

The remote host is missing updates announced in advisory RHSA-2009:1635. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: a NULL pointer dereference flaw was found in the NFSv4 implementation in the...

Fedora Core 11 FEDORA-2009-12348 (php-pear-Mail)

The remote host is missing an update to php-pear-Mail announced via advisory FEDORA-2009-12348. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

RedHat Security Advisory RHSA-2009:1635

The remote host is missing updates announced in advisory RHSA-2009:1635. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: a NULL pointer dereference flaw was found in the NFSv4 implementation in the...

Fedora Core 11 FEDORA-2009-12782 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12782. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

WU-FTPD SITE EXEC/INDEX Format String Vulnerability

This module exploits a format string vulnerability in versions of the Washington University FTP server older than 2.6.1. By executing specially crafted SITE EXEC or SITE INDEX commands containing format specifiers, an attacker can corrupt memory and execute arbitrary code. This module requires...

RedHat Security Advisory RHSA-2009:1619

The remote host is missing updates announced in advisory RHSA-2009:1619. Dstat is a versatile replacement for the vmstat, iostat, and netstat tools. Dstat can be used for performance tuning tests, benchmarks, and troubleshooting. Robert Buchholz of the Gentoo Security Team reported a flaw in the...

RedHat Security Advisory RHSA-2009:1601

The remote host is missing updates announced in advisory RHSA-2009:1601. The kdelibs packages provide libraries for the K Desktop Environment KDE. A buffer overflow flaw was found in the kdelibs string to floating point conversion routines. A web page containing malicious JavaScript could crash...

RedHat Security Advisory RHSA-2009:1619

The remote host is missing updates announced in advisory RHSA-2009:1619. Dstat is a versatile replacement for the vmstat, iostat, and netstat tools. Dstat can be used for performance tuning tests, benchmarks, and troubleshooting. Robert Buchholz of the Gentoo Security Team reported a flaw in the...

RedHat Security Advisory RHSA-2009:1601

The remote host is missing updates announced in advisory RHSA-2009:1601. The kdelibs packages provide libraries for the K Desktop Environment KDE. A buffer overflow flaw was found in the kdelibs string to floating point conversion routines. A web page containing malicious JavaScript could crash...

RedHat Security Advisory RHSA-2009:1620

The remote host is missing updates announced in advisory RHSA-2009:1620. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools...

CVE-2009-3894

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in 1 the current working directory or 2 a certain subdirectory of the current working directory...

Python 2.5.2 Imageop Module - imageop.crop() Buffer Overflow

Python 2.5.2 Imageop Module - imageop.crop Buffer Overflow Python's 'imageop' module is prone to a buffer-overflow vulnerability. Successful exploits may allow attackers to execute arbitrary code in the context of applications using the vulnerable Python module. This may result in a compromise of...

Python < 2.5.2 Imageop Module - 'imageop.crop()' Buffer Overflow

Python's 'imageop' module is prone to a buffer-overflow vulnerability. Successful exploits may allow attackers to execute arbitrary code in the context of applications using the vulnerable Python module. This may result in a compromise of the underlying system. Failed attempts may lead to a...

RedHat Security Advisory RHSA-2009:1595

The remote host is missing updates announced in advisory RHSA-2009:1595. The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating systems. A use-after-free flaw was found in the way CUPS handled references in its file descriptors-handling interface. A remote...

RedHat Security Advisory RHSA-2009:1595

The remote host is missing updates announced in advisory RHSA-2009:1595. The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating systems. A use-after-free flaw was found in the way CUPS handled references in its file descriptors-handling interface. A remote...

CUPS文件描述符处理远程拒绝服务漏洞

BUGTRAQ ID: 37048 CVE ID: CVE-2009-3553 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的scheduler/select.c文件中的cupsdDoSelect函数在处理其文件描述符处理接口中引用的方式存在释放后使用错误，远程攻击者可以通过以特殊方式查询特定打印机的当前打印任务列表导致cupsd崩溃。 Easy Software Products CUPS 1.3.7...

RedHat Security Advisory RHSA-2009:1582

The remote host is missing updates announced in advisory RHSA-2009:1582. The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software...

RedHat Security Advisory RHSA-2009:1572

The remote host is missing updates announced in advisory RHSA-2009:1572. The 4Suite package contains XML-related tools and libraries for Python, including 4DOM, 4XSLT, 4XPath, 4RDF, and 4XPointer. A buffer over-read flaw was found in the way 4Suite SPDX-FileCopyrightText: 2009 E-Soft Inc. Some te...

Apache mod_proxy_ftp模块远程命令注入漏洞

BUGTRAQ ID: 36254 CVE ID: CVE-2009-3095 Apache HTTP Server是一款流行的Web服务器。 Apache服务器的modproxyftp模块中存在远程命令注入漏洞。在逆向代理配置中，远程攻击者可以利用这个漏洞通过创建特制的HTTP Authorization头绕过预期的访问限制，向FTP服务器发送任意命令。 Apache Group Apache 2.2.x 厂商补丁： Apache Group ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...