6634 matches found
USN-927-2: NSS regression
USN-927-1 fixed vulnerabilities in NSS. Upstream NSS 3.12.6 added an additional checksum verification on libnssdbm3.so, but the Ubuntu packaging did not create this checksum. As a result, Firefox could not initialize the security component when the NSS Internal FIPS PKCS 11 Module was enabled. Th...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which...
CVE-2010-0009
Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify 1 hashes or 2 passwords...
Mandriva Update for foomatic-db MDVA-2010:099 (foomatic-db)
Check for the Version of foomatic-db OpenVAS Vulnerability Test Mandriva Update for foomatic-db MDVA-2010:099 foomatic-db Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for foomatic-db MDVA-2010:099 (foomatic-db)
Check for the Version of foomatic-db OpenVAS Vulnerability Test Mandriva Update for foomatic-db MDVA-2010:099 foomatic-db Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
DSA-2012-1 linux-2.6 - several issues
Bulletin has no description...
Debian DSA-2003-1 : linux-2.6 - privilege escalation/denial of service
NOTE: This kernel update marks the final planned kernel security update for the 2.6.18 kernel in the Debian release 'etch'. Although security support for 'etch' officially ended on Feburary 15th, 2010, this update was already in preparation before that date. A final update that includes fixes for...
[SECURITY] [DSA 2003-1] New Linux 2.6.18 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-2003-1 [email protected] http://www.debian.org/security/ Dann Frazier February 22, 2010 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
DSA-2003-1 linux-2.6 - several vulnerabilities
Bulletin has no description...
FreeBSD : bugzilla -- information leak (696053c6-0f50-11df-a628-001517351c22)
A Bugzilla Security Advisory reports : When moving a bug from one product to another, an intermediate page is displayed letting you select the groups the bug should be restricted to in the new product. However, a regression in the 3.4.x series made it ignore all groups which are not available in...
Bugzilla < 3.0.11 / 3.2.6 / 3.4.5 / 3.5.3 Multiple Vulnerabilities
Binary data 5331.prm...
Design/Logic Flaw
The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...
FWD: LedgerSMB Security Advisory: Multiple Vulnerabilities
Hi all; It has been brought to our attention that a number of security vulnerabilities have been noted in SQL-Ledger. Several of these affect earlier versions of LedgerSMB, and three hotfixes have been released for problems that continue to affect the LedgerSMB codebase. As always, we highly...
CVE-2010-0382
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response...
bind: out-of-bailiwick data vulnerability due to regression while fixing CVE-2009-4022
ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response...
Mandriva Update for firefox MDVA-2010:015 (firefox)
Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVA-2010:015 firefox Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Ubuntu Update for firefox-3.5, xulrunner-1.9.1 regression USN-878-1
Ubuntu Update for Linux kernel vulnerabilities USN-878-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8781.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for firefox-3.5, xulrunner-1.9.1 regression USN-878-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Ubuntu Update for firefox-3.0, xulrunner-1.9 regression USN-877-1
Ubuntu Update for Linux kernel vulnerabilities USN-877-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8771.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for firefox-3.0, xulrunner-1.9 regression USN-877-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Mandriva Update for fetchmail MDVA-2010:018 (fetchmail)
Check for the Version of fetchmail OpenVAS Vulnerability Test Mandriva Update for fetchmail MDVA-2010:018 fetchmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for firefox MDVA-2010:015 (firefox)
Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVA-2010:015 firefox Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...