RHEL 4 : seamonkey (RHSA-2008:0599)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2008:0599 advisory. - mozilla: CSS reference counter overflow ZDI-CAN-349 CVE-2008-2785 Note that Nessus has not tested for this issue but has instead relied only on the...

Mozilla Firefox 2.0.0.14存在多个远程漏洞

BUGTRAQ ID: 30038 CVE ID：CVE-2008-2798 CVE-2008-2799 CVE-2008-2800 CVE-2008-2801 CVE-2008-2802 CVE-2008-2803 CVE-2008-2805 CVE-2008-2806 CVE-2008-2807 CVE-2008-2808 CVE-2008-2809 CVE-2008-2810 CVE-2008-2811 CNCVE ID：CNCVE-20082798 CNCVE-20082799 CNCVE-20082800 CNCVE-20082801 CNCVE-20082802...

RHEL 4 / 5 : net-snmp (RHSA-2008:0529)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0529 advisory. - net-snmp SNMPv3 authentication bypass VU877044 CVE-2008-0960 - net-snmp: buffer overflow in perl module's Perl Module snprintvalue...

RHEL 5 : xen (RHSA-2008:0194)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0194 advisory. - xen xenmon.py / xenbaked insecure temporary file accesss CVE-2007-3919 - QEMU Buffer overflow via crafted net socket listen option...

Adobe Flash Player Multimedia File Remote Buffer Overflow Vulnerability

Description Adobe Flash Player is prone to a remote buffer-overflow vulnerability when handling multimedia files with certain tags. An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in...

RHEL 4 / 5 : ghostscript (RHSA-2008:0155)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2008:0155 advisory. - ghostscript: stack-based buffer overflow in .seticcspace operator CVE-2008-0411 Note that Nessus has not tested for this issue but has instead...

RHEL 4 : libexif (RHSA-2007:1166)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1166 advisory. - libexif integer overflow CVE-2007-6352 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Adobe Flash Player ActiveX控件通用跨站脚本漏洞

Adobe Flash Player是一款流行的FLASH播放程序。 Adobe Flash Player包含的ActiveX控件处理navigateToURL API存在缺陷，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息或进行其他攻击。 navigateToURL API函数接收两个参数，URL和要浏览的帧名，SWF动画可在javascript: URI中传递而帧名可是其他域的帧名，这可导致URI执行在其他帧安全上下文中执行，攻击者可以构建恶意WEB页，诱使用户访问来触发。 RedHat Enterprise Linux Supplementary v.5 server...

CUPS IPP标签远程栈溢出漏洞

BUGTRAQ ID: 26268 CVECAN ID: CVE-2007-4351 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS的cups/ipp.c文件中的ippReadIO函数在处理IPP（Internet打印协议）标签时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。...

RHEL 5 : cups (RHSA-2007:1020)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1020 advisory. - cups boundary error CVE-2007-4351 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Linux Kernel eHCA驱动物理地址空间信息泄露漏洞

Linux是一款开放源代码的操作系统。 Linux包含的eHCA驱动在映射用户空间资源时存在问题，本地攻击者可以利用漏洞获得物理地址等敏感信息。 部分驱动包含的资源映射到用户空间的大小为4K，如果内核配置使用64K的页，那么在映射过程中会超过60K大小的物理地址空间映射到用户空间，导致敏感信息泄露。 RedHat Enterprise Linux Desktop v.5 client RedHat Enterprise Linux v. 5 server Linux kernel 2.6.18 .4 Linux kernel 2.6.18 .3 Linux kernel 2.6.18 ....

RHEL 4 : kernel (RHSA-2007:0937)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0937 advisory. - x8664 syscall vulnerability CVE-2007-4573 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHEL 4 / 5 : php (RHSA-2007:0890)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:0890 advisory. - gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG CVE-2007-2756 - php chunksplit integer overflow CVE-2007-2872 - p...

RHEL 4 : libgtop2 (RHSA-2007:0765)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0765 advisory. - Stack overflow libgtop when pathname of mmap-ed file is too long CVE-2007-0235 Note that Nessus has not tested for this issue but has instead relie...

RHEL 4 / 5 : tetex (RHSA-2007:0731)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0731 advisory. - xpdf integer overflow CVE-2007-3387 Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

Apache HTTP Server Mod_Cache拒绝服务漏洞

Apache HTTP Server是一款开放源代码的WEB服务程序。 Apache HTTP Server包含的Modcache存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 如果Cache-Control头字段数据s-maxage, max-age, min-fresh, max-stale其中一个值不赋值，那么Modcache模块在解析的时候可导致应用程序崩溃，造成拒绝服务攻击。 RedHat Enterprise Linux Desktop Workstation v. 5 client RedHat Enterprise Linux Desktop v.5...

LibWPD库多个缓冲区溢出漏洞

libwpd是一款用于读取和转换Word Perfect文档的函数库。 libwpd处理畸形文档存在漏洞，远程攻击者可利用漏洞以应用程序进程权限执行任意指令。 第一个问题存在于WP6GeneralTextPacket::readContents函数中，此函数读取一系列整数值然后相加，加的结果用于从堆中分配内存块。函数然后使用加法得到的operand作为拷贝数据字节大小，从文件中拷贝数据到缓冲区，不过求和操作可能导致整数溢出，在拷贝操作中溢出缓冲区。 另外问题是WP3TablesGroup::readContents和...

GD图形库JIS编码字体缓冲区溢出漏洞

GD Graphics Library是一款流行的图形库，用于动态图象建立。 GD图形库处理JIS编码字体存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当处理特殊畸形的字符串时如果使用了JIS编码字体，由于NULL终止符的增加，会导致不可预料的结果，可能导致以应用程序进程权限任意指令执行。 RedHat Enterprise Linux WS 5 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 5 RedHat Enterprise Linux ES 4 RedHat Enterprise Linu...

ImageMagick Sun Bitmap图象文件远程缓冲区溢出漏洞

ImageMagick是一套可以用来读、写和处理超过89种基本格式的图片文件。 ImageMagick处理SUN Bitmap图象文件存在问题，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 攻击者可以构建恶意SUN Bitmap图象，诱使用户使用ImageMagick打开来触发，目前没有详细漏洞细节提供。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHa...

KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞

JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题，本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...