RedHat Security Advisory RHSA-2009:1179

The remote host is missing updates announced in advisory RHSA-2009:1179. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools...

RedHat Security Advisory RHSA-2009:1180

The remote host is missing updates announced in advisory RHSA-2009:1180. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools...

RedHat Security Advisory RHSA-2009:1184

The remote host is missing updates announced in advisory RHSA-2009:1184. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

RedHat Security Advisory RHSA-2009:1205

The remote host is missing updates announced in advisory RHSA-2009:1205. The Apache HTTP Server is a popular Web server. The httpd package shipped with Red Hat Enterprise Linux 3 contains embedded copies of the Apache Portable Runtime APR libraries, which provide a free library of C data structur...

Linux Kernel 2.x (RedHat) - sock_sendpage() Ring0 Privilege Escalation (1)

Linux Kernel 2.x RedHat - socksendpage Ring0 Privilege Escalation 1 / dedicated to my best friend in the whole world, Robin Price the joke is in your hands just too easy -- some nice library functions for reuse here though credits to julien tinnes/tavis ormandy for the bug may want to remove the...

Linux Kernel 2.x (RedHat) - 'sock_sendpage()' Ring0 Privilege Escalation (1)

/ dedicated to my best friend in the whole world, Robin Price the joke is in your hands just too easy -- some nice library functions for reuse here though credits to julien tinnes/tavis ormandy for the bug may want to remove the attributeregparm3 for 2.4 kernels, I have no time to test...

libxml2栈溢出和释放后使用拒绝漏洞

BUGTRAQ ID: 36010 CVECAN ID: CVE-2009-2414,CVE-2009-2416 libxml2软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml库处理DTD中根XML文档元素定义的方式存在栈溢出漏洞，解析Notation和Enumeration属性类型的方式存在多个释放后使用漏洞。远程攻击者可以提供特制的XML文件，如果本地用户受骗打开了该文件，就会导致拒绝服务（应用程序崩溃）。 XMLSoft Libxml2 = 2.6.26 厂商补丁： RedHat ------...

JNLPAppletLauncher库创建任意文件漏洞

BUGTRAQ ID: 35946 CVECAN ID: CVE-2009-2676 JNLPAppletLauncher是一个基于JNLP的applet启动器类，允许applet使用Java 3D、JOGL、JOAL等扩展。 JNLPAppletLauncher中的安全漏洞可能影响Sun JDK和JRE用户。不可信任的Java Applet可能导致旧版的JNLPAppletLauncher向下载和运行不可信任的applet用户的系统上写入任意文件。出现这个漏洞时用户会看到警告对话框说明数字签名已过期。 Sun JDK 6 Sun JDK 5.0 Sun JRE 6 Sun JRE 5....

Sun Java运行时环境音频系统信息泄露漏洞

BUGTRAQ ID: 35939 CVECAN ID: CVE-2009-2670 Solaris系统的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 Java运行时环境音频系统中的安全漏洞可能允许不可信任的Applet或Java Web Start应用访问java.lang.System属性。 Sun JDK 6 Sun JDK 5.0 Sun JRE 6 Sun JRE 5.0 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2009:1199-01）以及相应补丁: RHSA-2009:1199-01：Critical:...

Sun Java运行时环境XML解析拒绝服务漏洞

BUGTRAQ ID: 35958 CVECAN ID: CVE-2009-2625 Solaris系统的Java运行时环境（JRE）为JAVA应用程序提供可靠的运行环境。 JRE在解析包含有非预期字节值和递归括号的XML元素时可能导致程序越界访问内存或陷入死循环。攻击者可以通过诱骗用户打开特制文件或向服务器提交恶意XML内容来利用这个漏洞，导致拒绝服务的情况。 Sun JDK 6 Sun JDK 5.0 Sun JRE 6 Sun JRE 5.0 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2009:1199-01）以及相应补丁:...

Mozilla SeaMonkey规则表达式解析堆缓冲区溢出漏洞

Bugraq ID: 35891 CVE ID：CVE-2009-2404 Mozilla SeaMonkey是一款开源的WEB应用程序套件。 Mozilla SeaMonkey处理用于匹配SSL证书中的公用名的规则表达式代码存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建恶意的证书，诱使用户使用Mozilla SeaMonkey处理可触发此漏洞。攻击者要利用此漏洞需要使SeaMonkey认为这个证书可信，否则会显示警告消息。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat...

Fedora SSSD BE数据库无密码认证绕过漏洞

Bugraq ID: 35868 CVE ID：CVE-2009-2410 Fedora是一款基于linux内核的发行版本。 Fedora SSSD存在验证绕过问题，远程攻击者可以利用漏洞获得对目标系统的未授权访问。 如果用户增加到SSSD BE数据库，但没有设置密码，那么这个用户就可以通过SSH连接配置SSSD客户端机器，并无需任何密码即可访问。 RedHat SSSD 0.4.1-2 RedHat Fedora 11 厂商解决方案 用户可参考如下安全公告获得补丁信息： https://bugzilla.redhat.com/showbug.cgi?id=514057...

Fedora Core 11 FEDORA-2009-7614 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-7614. OpenVAS Vulnerability Test $Id: fcore20097614.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7614 seamonkey Authors: Thomas Reinke Copyright: Copyright c 200...

RedHat Security Advisory RHSA-2009:1148

The remote host is missing updates announced in advisory RHSA-2009:1148. The Apache HTTP Server is a popular Web server. A denial of service flaw was found in the Apache modproxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume...

RedHat Security Advisory RHSA-2009:1164

The remote host is missing updates announced in advisory RHSA-2009:1164. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not address all possible flaws in the way Tomcat handle...

RedHat Security Advisory RHSA-2009:1178

The remote host is missing updates announced in advisory RHSA-2009:1178. Python is an interpreted, interactive, object-oriented programming language. When the assert system call was disabled, an input sanitization flaw was revealed in the Python string object implementation that led to a buffer...

RedHat Security Advisory RHSA-2009:1157

The remote host is missing updates announced in advisory RHSA-2009:1157. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. Security fixes: a flaw was found in the Intel PRO/1000 network driver in the Linux kernel. Frames with sizes near the MTU of an interfa...

RedHat Security Advisory RHSA-2009:1164

The remote host is missing updates announced in advisory RHSA-2009:1164. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was discovered that the Red Hat Security Advisory RHSA-2007:0871 did not address all possible flaws in the way Tomcat handle...

RedHat Security Advisory RHSA-2009:1162

The remote host is missing updates announced in advisory RHSA-2009:1162. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

RedHat Security Advisory RHSA-2009:1157

The remote host is missing updates announced in advisory RHSA-2009:1157. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. Security fixes: a flaw was found in the Intel PRO/1000 network driver in the Linux kernel. Frames with sizes near the MTU of an interfa...