RedHat Security Advisory RHSA-2009:0350

The remote host is missing updates announced in advisory RHSA-2009:0350. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted...

RedHat Security Advisory RHSA-2009:0377

The remote host is missing updates announced in advisory RHSA-2009:0377. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. The Java Runtime Environment JRE contains the software and tools that users need to run applications written using the...

RedHat Security Advisory RHSA-2009:0410

The remote host is missing updates announced in advisory RHSA-2009:0410. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center KDC. An input validation flaw was...

RedHat Security Advisory RHSA-2009:0411

The remote host is missing updates announced in advisory RHSA-2009:0411. The device-mapper multipath packages provide tools to manage multipath devices by issuing instructions to the device-mapper multipath kernel module, and by managing the creation and removal of partitions for device-mapper...

RedHat Security Advisory RHSA-2009:0337

The remote host is missing updates announced in advisory RHSA-2009:0337. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted...

MIT Kerberos SPNEGO和ASN.1多个拒绝服务漏洞

BUGTRAQ ID: 34408 CVECAN ID: CVE-2009-0844,CVE-2009-0847 Kerberos是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5是一种常用的开源Kerberos实现。 krb5在实现SPNEGO GSS-API机制时getinputtoken函数可能会读过网络输入缓冲区的末尾，如果读取了无效地址空间可能会导致任何使用Kerberos GSS-API库来认证用户的网络服务崩溃。...

CVE-2009-1284

Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file...

CVE-2009-0796

Cross-site scripting XSS vulnerability in Status.pm in Apache::Status and Apache2::Status in modperl1 and modperl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI...

krb5 security update

CentOS Errata and Security Advisory CESA-2009:0409 Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system...

Linux Kernel 'NFS filename'本地拒绝服务漏洞

BUGTRAQ ID: 34390 CNCAN ID：CNCAN-2009040701 Linux是一款开放源代码的操作系统。 在结构nfsserver初始化过程中没有正确限制NFS文件名，可导致NFS客户端崩溃。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux AS 4 RedHat Enterprise Linux Desktop version 4 Linux kernel 2.6.21 4 Linux kernel 2.6.21 .7 Linux kernel...

RedHat Security Advisory RHSA-2009:0397

The remote host is missing updates announced in advisory RHSA-2009:0397. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A...

RedHat Security Advisory RHSA-2009:0397

The remote host is missing updates announced in advisory RHSA-2009:0397. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A...

RedHat Security Advisory RHSA-2009:0326

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0326. Security fixes: memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease. CVE-2009-0778, Important Chris Evans...

RedHat Security Advisory RHSA-2009:0326

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0326. Security fixes: memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease. CVE-2009-0778, Important Chris Evans...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

pam_ssh用户名枚举漏洞

BUGTRAQ ID: 34333 CNCAN ID：CNCAN-2009040207 pamssh是一款结合SSH密钥和SSH客户端使用的PAM模块，允许使用SSH密钥为UNIX提供登录服务。 pamssh在处理基于SSH KEY的用户验证时存在问题，远程攻击者可以利用漏洞获得敏感用户信息。 当PAM使用USE=ssh编译时，攻击者连接pam+ssh启用的服务器时，如果用户不存在SSH客户端会显示"Password:"，而如果是存在用户，则显示"SSH passphrase:"，攻击者借此可获得敏感用户信息。 RedHat Fedora 9 RedHat Fedora 10...

Ghostscript CCITTFax Decoding Filter - Denial of Service

Ghostscript CCITTFax Decoding Filter - Denial of Service Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has no...

Ghostscript 'CCITTFax' Decoding Filter Denial of Service Vulnerability

No description provided by source. Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has not been confirmed...

Ghostscript 'CCITTFax' Decoding Filter - Denial of Service

Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has not been confirmed. Vulnerable: Ubuntu Ubuntu Linux 8.10...

RedHat Security Advisory RHSA-2009:0295

The remote host is missing updates announced in advisory RHSA-2009:0295. The Simple Network Management Protocol SNMP is a protocol used for network management. It was discovered that the snmpd daemon did not use TCP wrappers correctly, causing network hosts access restrictions defined in...