Mandriva Update for mandriva-release MDVA-2010:239 (mandriva-release)

Check for the Version of mandriva-release OpenVAS Vulnerability Test Mandriva Update for mandriva-release MDVA-2010:239 mandriva-release Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

MDVA-2010:239 : mandriva-release

This update provides a visual refresh for packages artwork to mark the Mandriva 2010.2 release. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

Mozilla Foundation Security Advisory 2010-79

Mozilla Foundation Security Advisory 2010-79 Title: Java security bypass from LiveConnect loaded via data: URL meta refresh Impact: Critical Announced: December 9, 2010 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.13 Firefox 3.5.16 SeaMonkey 2.0.11 Description...

data: URL meta refresh (MFSA 2010-79)

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via...

data: URL meta refresh (MFSA 2010-79)

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via...

Java security bypass from LiveConnect loaded via data: URL meta refresh — Mozilla

Security researcher Gregory Fleischer reported that when a Java LiveConnect script was loaded via a data: URL which redirects via a meta refresh, then the resulting plugin object was created with the wrong security principal and thus received elevated privileges such as the abilities to read loca...

(bgpd): Stack buffer overflow by processing certain Route-Refresh messages

Stack-based buffer overflow in the bgprouterefreshreceive function in bgppacket.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a malformed Outbound Route Filtering ORF record in a BGP...

RedHat Update for quagga RHSA-2010:0785-01

Check for the Version of quagga OpenVAS Vulnerability Test RedHat Update for quagga RHSA-2010:0785-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

(bgpd): Stack buffer overflow by processing certain Route-Refresh messages

Stack-based buffer overflow in the bgprouterefreshreceive function in bgppacket.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a malformed Outbound Route Filtering ORF record in a BGP...

SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 6741)

IBM Java 5 was updated to Service Refresh 11. It fixes lots of bugs and security issues. The timezone update to 1.6.9s with the latest Fiji change. - A vulnerability in the Java Runtime Environment with decoding DER encoded data might allow a remote client to cause the JRE to crash, resulting in ...

CVE-2010-2948

Stack-based buffer overflow in the bgprouterefreshreceive function in bgppacket.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a malformed Outbound Route Filtering ORF record in a BGP...

CVE-2010-2948

Stack-based buffer overflow in the bgprouterefreshreceive function in bgppacket.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a malformed Outbound Route Filtering ORF record in a BGP...

CVE-2010-2948

Affected software: Quagga bgpd (bgp_route_refresh_receive in bgp_packet.c) prior to version 0.99.17. Vulnerability type: stack-based buffer overflow when processing a malformed Outbound Route Filtering (ORF) in a BGP ROUTE-REFRESH message. Impact (as stated): remote authenticated users can cause ...

PT-2010-1071 · Quagga +1 · Quagga +1

Name of the Vulnerable Software and Affected Versions: Quagga versions prior to 0.99.17 Quagga versions 0.98.3 and 0.98.6 Description: The issue concerns multiple vulnerabilities in the Quagga package, which can lead to a disruption of confidentiality, integrity, and availability of protected...

Debian DSA-2104-1 : quagga - several vulnerabilities

Several remote vulnerabilities have been discovered in the BGP implementation of Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2948 When processing a crafted Route Refresh message received from a configured, authenticated...

FreeBSD : quagga -- stack overflow and DoS vulnerabilities (167953a4-b01c-11df-9a98-0015587e2cc1)

The Red Hat security team reported two vulnerabilities : A stack-based buffer overflow flaw was found in the way Quagga's bgpd daemon processed Route-Refresh messages. A configured Border Gateway Protocol BGP peer could send a Route-Refresh message with specially crafted Outbound Route Filtering...

SuSE 11 Security Update : IBM Java 1.6.0 (SAT Patch Number 1748)

IBM Java 6 was updated to Service Refresh 7. The following security issues were fixed : - A vulnerability in the Java Runtime Environment with decoding DER encoded data might allow a remote client to cause the JRE to crash, resulting in a denial of service condition. CVE-2009-3876 / CVE-2009-3877...

SuSE9 Security Update : IBM Java 1.5.0 (YOU Patch Number 12564)

IBM Java 5 was updated to Service Refresh 11. It fixes lots of bugs and security issues. It also contains a timezone update for the current Fiji change timezone 1.6.9s. The update fixes the following security issues : - A vulnerability in the Java Runtime Environment with decoding DER encoded dat...

PT-2009-6215 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti version 0.8.7e Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected areas include graph.php, include/top gra...

New vulnerabilities in OpenX

Hello 3APA3A! I want to warn you about Denial of Service, Cross-Site Scripting and Redirector vulnerabilities in OpenX. DoS Looped DoS: http://site/adclick.php About Looped DoS I wrote in my classification of DoS vulnerabilities in web applications http://websecurity.com.ua/2663/. Vulnerable are...