Security fix for the ALT Linux 7 package glibc version 6:2.11.3-alt4

April 28, 2011 Dmitry V. Levin 6:2.11.3-alt4 - Backported upstream fixes for Sourceware12393, Sourceware12583 CVE-2011-1659 and Sourceware12685. - Fixed nscd reload closes: 25379. - glibc-utils: dropped rpcinfo which is now provided by rpcbind = 0.2.1-alt0.4...

Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt4

April 28, 2011 Dmitry V. Levin 6:2.11.3-alt4 - Backported upstream fixes for Sourceware12393, Sourceware12583 CVE-2011-1659 and Sourceware12685. - Fixed nscd reload closes: 25379. - glibc-utils: dropped rpcinfo which is now provided by rpcbind = 0.2.1-alt0.4...

CVE-2010-4763

The ACL-customer-status Ticket Type setting in Open Ticket Request System OTRS before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users to bypass intended ACL restrictions on the 1 Status, 2 Service, and 3 Queue via selections...

DEBIAN-CVE-2010-4763

The ACL-customer-status Ticket Type setting in Open Ticket Request System OTRS before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users to bypass intended ACL restrictions on the 1 Status, 2 Service, and 3 Queue via selections...

Sql injection

The ACL-customer-status Ticket Type setting in Open Ticket Request System OTRS before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users to bypass intended ACL restrictions on the 1 Status, 2 Service, and 3 Queue via selections...

CVE-2010-4763

Removed by vendor...

CVE-2010-4763: Undefined Security Weakness

The ACL-customer-status Ticket Type setting in Open Ticket Request System OTRS before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users to bypass intended ACL restrictions on the 1 Status, 2 Service, and 3 Queue via selections...

Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20110223-asa)

The remote Cisco ASA device is missing a security patch and may be affected by the following issues : - When configured for transparent firewall mode, a packet buffer exhaustion vulnerability could cause the appliance to stop forwarding traffic. CVE-2011-0393 - When SCCP inspection is enabled, a...

Nessus 4.4.1 Latest Version Download !

Nessus 4.4.1 Latest Version Download ! New in this version: Scan Scheduling Nessus 4.4 lets you configure scans to run periodically on a daily/weekly/monthly basis. Configure your scans and let Nessus start them at the most appropriate time --- Enhanced Reporting Nessus 4.4 lets you compare...

CVE-2011-0395

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.20, 8.1 before 8.12.48, 8.2 before 8.23, and 8.3 before 8.32.1, when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service device reload...

CVE-2011-0395

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.20, 8.1 before 8.12.48, 8.2 before 8.23, and 8.3 before 8.32.1, when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service device reload...

CVE-2011-0395: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.20, 8.1 before 8.12.48, 8.2 before 8.23, and 8.3 before 8.32.1, when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service device reload...

CVE-2011-0394: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 before 7.08.11, 7.1 and 7.2 before 7.25.1, 8.0 before 8.05.19, 8.1 before 8.12.47, 8.2 before 8.22.19, and 8.3 before 8.31.8; Cisco PIX Security Appliances 500 series devices; and Cisco Firewall Services Module aka FWSM...

PT-2011-2316 · Cisco · Cisco Asa +2

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.08.10 Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.1 through 7.25.0 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

Code injection

Unspecified vulnerability in Cisco IOS 12.424MD before 12.424MD2 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to cause a denial of service device hang or reload via crafted TCP packets, aka Bug ID CSCth41891, a different vulnerability than CVE-2011-0349...

CVE-2011-0350: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.424MD before 12.424MD2 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to cause a denial of service device hang or reload via crafted TCP packets, aka Bug ID CSCth41891, a different vulnerability than CVE-2011-0349...

CVE-2011-0349: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.424MD before 12.424MD2 on the Cisco Content Services Gateway Second Generation aka CSG2 allows remote attackers to cause a denial of service device hang or reload via crafted TCP packets, aka Bug ID CSCth17178, a different vulnerability than CVE-2011-0350...

Code injection

Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...

CVE-2009-5038

Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...

CVE-2009-5038

Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...