RedHat Security Advisory RHSA-2009:1066

The remote host is missing updates announced in advisory RHSA-2009:1066. A server-side code injection flaw was found in the SquirrelMail mapypalias function. If SquirrelMail was configured to retrieve a user SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a...

RedHat Security Advisory RHSA-2009:1081

The remote host is missing updates to kernel-rt announced in advisory RHSA-2009:1081. These updated packages fix the following security issues: a buffer overflow flaw was found in the CIFSTCon function of the Linux kernel Common Internet File System CIFS implementation. When mounting a CIFS share...

RedHat Security Advisory RHSA-2009:1083

The remote host is missing updates announced in advisory RHSA-2009:1083. The Common UNIX® Printing System CUPS provides a portable printing layer for UNIX operating systems. The Internet Printing Protocol IPP allows users to print and manage printing-related tasks over a network. The CUPS pdftops...

CVE-2009-1385

Integer underflow in the e1000cleanrxirq function in drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet aka e1000 before 7.5.5 allows remote attackers to cause a denial of service panic via a...

Apache HTTP Server "AllowOverride"和"Options"安全绕过漏洞

Bugraq ID: 35115 CVE ID：CVE-2009-1195 CNCVE ID：CNCVE-20091195 Apache是一款开放源代码的WEB服务程序。 Apache在处理".htaccess"文件中的"AllowOverride"和部分"options"参数存在错误，可导致通过SSI执行命令。 如下的配置存在安全问题： a 如果"AllowOverride Options=IncludesNoEXEC"配置在httpd.conf中，用户可以在.htaccess文件中设置"Options Includes"，SSI将会以exec=允许方式启用。...

squirrelmail security update

1.4.8-5.0.1.el53.7 - Remove Redhat splash screen images 1.4.8-5.7 - fix broken patch for CVE-2009-1579 1.4.8-5.6 - fix broken patch for CVE-2009-1579 1.4.8-5.5 - don't ship patch backup files 1.4.8-5.4 - fix: CVE-2009-1581 : CSS positioning vulnerability - fix: CVE-2009-1579 : Server-side code...

RedHat Security Advisory RHSA-2009:1055

The remote host is missing updates announced in advisory RHSA-2009:1055. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: a buffer overflow was found in the Linux kernel Partial Reliable Stream Control Transmissi...

RedHat Security Advisory RHSA-2009:1055

The remote host is missing updates announced in advisory RHSA-2009:1055. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: a buffer overflow was found in the Linux kernel Partial Reliable Stream Control Transmissi...

RedHat Security Advisory RHSA-2009:1060

The remote host is missing updates to Pidgin announced in advisory RHSA-2009:1060. A buffer overflow flaw was found in the way Pidgin initiates file transfers when using the Extensible Messaging and Presence Protocol XMPP. If a Pidgin client initiates a file transfer, and the remote target sends ...

Pidgin多个缓冲区溢出漏洞

BUGTRAQ ID: 35067 CVECAN ID: CVE-2009-1376,CVE-2009-1375,CVE-2009-1374,CVE-2009-1373 Pidgin是支持多种协议的即时通讯客户端。 Pidgin在处理各种即时消息时存在多个缓冲区溢出漏洞，可能导致拒绝服务或完全入侵用户的系统。 1 处理MSN SLP消息时的截尾错误可能导致缓冲区溢出。 2 XMPP SOCKS5 bytestream服务器在初始化出站文件传输时存在缓冲区溢出。 3 PurpleCircBuffer结构的实现中存在边界条件错误，特制的XMPP或Sametime报文可能导致内存破坏而崩溃。 ...

RedHat Security Advisory RHSA-2009:0329

The remote host is missing updates to FreeType announced in advisory RHSA-2009:0329. Tavis Ormandy of the Google Security Team discovered several integer overflow flaws in the FreeType 2 font engine. If a user loaded a carefully-crafted font file with an application linked against FreeType 2, it...

RedHat Security Advisory RHSA-2009:1062

The remote host is missing updates to FreeType announced in advisory RHSA-2009:1062. Tavis Ormandy of the Google Security Team discovered several integer overflow flaws in the FreeType 2 font engine. If a user loaded a carefully-crafted font file with an application linked against FreeType 2, it...

RedHat Security Advisory RHSA-2009:1062

The remote host is missing updates to FreeType announced in advisory RHSA-2009:1062. Tavis Ormandy of the Google Security Team discovered several integer overflow flaws in the FreeType 2 font engine. If a user loaded a carefully-crafted font file with an application linked against FreeType 2, it...

freetype security update

CentOS Errata and Security Advisory CESA-2009:1061 Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeType is a free, high-quality,...

NTP 'ntpd' Autokey栈缓冲区溢出漏洞

Bugraq ID: 35017 CVE ID：CVE-2009-1252 CNCVE ID：CNCVE-20091252 NTP Network Time Protocol是一款客户端用于与时间服务器同步日期和时间的协议。 NTPd在以OpenSSL支持的情况下编译时存在栈缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 ntpd/ntpcrypto.c中cryptorecv函数使用sprintf存在缓冲区溢出，此漏洞需要配置使用autokey才会触发ntpd配置使用公钥加密进行NTP报文验证。远程未授权攻击者可以以ntpd守护程序权限执行任意代码。 Ubuntu...

RedHat Security Advisory RHSA-2009:0981

The remote host is missing updates to util-linux announced in advisory RHSA-2009:0981. A log injection attack was found in util-linux when logging log in attempts via the audit subsystem of the Linux kernel. A remote attacker could use this flaw to modify certain parts of logged events, possibly...

RedHat Security Advisory RHSA-2009:1040

The remote host is missing updates announced in advisory RHSA-2009:1040. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time source. A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public...

RedHat Security Advisory RHSA-2009:1039

The remote host is missing updates announced in advisory RHSA-2009:1039. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time source. A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public...

RedHat Security Advisory RHSA-2009:0479

The remote host is missing updates announced in advisory RHSA-2009:0479. Perl DBI is a database access Application Programming Interface API for the Perl language. perl-DBD-Pg allows Perl applications to access PostgreSQL database servers. A heap-based buffer overflow flaw was discovered in the...

RedHat Security Advisory RHSA-2009:1038

The remote host is missing updates announced in advisory RHSA-2009:1038. The IBM 1.5.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software...