RedHat Security Advisory RHSA-2009:1108

The remote host is missing updates announced in advisory RHSA-2009:1108. The Apache HTTP Server is a popular Web server. The httpd package shipped with Red Hat Enterprise Linux 3 contains an embedded copy of the Apache Portable Runtime APR utility library, a free library of C data structures and...

RedHat Security Advisory RHSA-2009:1101

The remote host is missing updates announced in advisory RHSA-2009:1101. cscope is a mature, ncurses-based, C source-code tree browsing tool. Multiple buffer overflow flaws were found in cscope. An attacker could create a specially crafted source code file that could cause cscope to crash or,...

RedHat Security Advisory RHSA-2009:1109

The remote host is missing updates announced in advisory RHSA-2009:1109. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple security flaws were discovered in Adobe Reader. A specially crafted PDF file could cause Adobe Reader to crash or, potentially,...

CentOS Security Advisory CESA-2009:1106 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:1106. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

CentOS Security Advisory CESA-2009:1102 (cscope)

The remote host is missing updates to cscope announced in advisory CESA-2009:1102. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

RedHat Security Advisory RHSA-2009:1106

The remote host is missing updates to the Linux kernel announced in advisory RHSA-2009:1106. Security fixes: several flaws were found in the way the Linux kernel CIFS implementation handles Unicode strings. CIFS clients convert Unicode strings sent by a server to their local character sets, and...

RedHat Security Advisory RHSA-2009:1107

The remote host is missing updates announced in advisory RHSA-2009:1107. apr-util is a utility library used with the Apache Portable Runtime APR. It aims to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for...

RedHat Security Advisory RHSA-2009:1101

The remote host is missing updates announced in advisory RHSA-2009:1101. cscope is a mature, ncurses-based, C source-code tree browsing tool. Multiple buffer overflow flaws were found in cscope. An attacker could create a specially crafted source code file that could cause cscope to crash or,...

RedHat Security Advisory RHSA-2009:1102

The remote host is missing updates announced in advisory RHSA-2009:1102. cscope is a mature, ncurses-based, C source-code tree browsing tool. Multiple buffer overflow flaws were found in cscope. An attacker could create a specially crafted source code file that could cause cscope to crash or,...

RedHat Security Advisory RHSA-2009:1107

The remote host is missing updates announced in advisory RHSA-2009:1107. apr-util is a utility library used with the Apache Portable Runtime APR. It aims to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR. Including support for...

Apache HTTP Server AllowOverride选项绕过安全限制漏洞

BUGTRAQ ID: 35115 CVECAN ID: CVE-2009-1195 Apache HTTP Server是一款流行的Web服务器。 Apache HTTP Server没有正确地处理AllowOverride指令中的Options=IncludesNOEXEC选项，本地用户可以通过在.htaccess文件中配置1 Options Includes、2 Options +Includes或3 Options +IncludesNOEXEC并在.shtml文件中注入exec元素导致绕过安全限制获得权限。 Apache 2.2.x 厂商补丁： Apache Group...

Mozilla Firefox和SeaMonkey JavaScript Chrome特权提升漏洞

Bugraq ID: 35373 CVE ID：CVE-2009-1841 CNCVE ID：CNCVE-20091841 Mozilla Firefox是一款开放源代码的WEB浏览器。SeaMonkey一款开放源代码的新闻组客户端。 Mozilla安全研究员mozbugra4报告存在安全漏洞，允许页面内容的脚本以提升特权运行。使用这个漏洞，攻击者可以导致chrome特权对象，如浏览器边栏或FeedWriter与WEB内容交互，使攻击者控制的代码以对象的chrome特权运行。 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04...

RedHat Security Advisory RHSA-2009:1095

The remote host is missing updates announced in advisory RHSA-2009:1095. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

RedHat Security Advisory RHSA-2009:1095

The remote host is missing updates announced in advisory RHSA-2009:1095. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

RedHat Security Advisory RHSA-2009:1087

The remote host is missing updates announced in advisory RHSA-2009:1087. modjk is an Apache Tomcat connector that allows Apache Tomcat and the Apache HTTP Server to communicate with each other. An information disclosure flaw was found in modjk. In certain situations, if a faulty client set the...

RedHat Security Advisory RHSA-2009:1087

The remote host is missing updates announced in advisory RHSA-2009:1087. modjk is an Apache Tomcat connector that allows Apache Tomcat and the Apache HTTP Server to communicate with each other. An information disclosure flaw was found in modjk. In certain situations, if a faulty client set the...

RHEL 4 : seamonkey (RHSA-2009:1096)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1096 advisory. - Firefox browser engine crashes CVE-2009-1392 - Firefox JavaScript engine crashes CVE-2009-1833 - Firefox Arbitrary domain cookie access by...

seamonkey security update

1.0.9-43.0.1.el48 - Added mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-43.el4 - Added fixes from 1.9.0.11...

CVE-2009-1698

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets CSS attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code ...

RedHat Security Advisory RHSA-2008:0002

The remote host is missing updates announced in advisory RHSA-2008:0002. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...