sssd security, bug fix, and enhancement update

1.5.1-37 - Reverts: rhbz680443 - Dynamic DNS update fails if multiple servers are - given in ipaserver config option 1.5.1-36 - Resolves: rhbz709333 - sssd. should require sssd-client. 1.5.1-35 - Resolves: rhbz707340 - latest sssd fails if ldapdefaultauthtoktype is - not mentioned - Resolves:...

CVE-2011-1623

CVE-2011-1623 affects Cisco MXE 5600 devices running Cisco Media Processing Software prior to 1.2. The root user account is enabled by default with a password, allowing an attacker to gain complete control via local console, SSH, or Telnet (if enabled). Remediation documented by Cisco: upgrade to...

libguestfs security, bug fix, and enhancement update

1.7.17-17 - Remove dependency on gfs2-utils. resolves: rhbz695138 1.7.17-16 - Canonicalize /dev/vd paths in virt-inspector code. resolves: rhbz691724 1.7.17-15 - Fix trace segfault for non-daemon functions. resolves: rhbz676788 1.7.17-14 - Add explicit BuildRequires for latest augeas. RHBZ677616...

Important: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Updated qemu-kvm packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

SuSE 10 Security Update : java-1_6_0-ibm, java-1_6_0-ibm-32bit, java-1_6_0-ibm-64bit, java-1_6_0-ibm-alsa, java-1_6_0-ibm-alsa-32bit, java-1_6_0-ibm-demo, java-1_6_0-ibm-devel, java-1_6_0-ibm-devel-32bit, java-1_6_0-ibm-fonts, java-1_6_0-ibm-jdbc, java-1_6_0-ibm-jdbc-32bit, java-1_6_0-ibm-jdbc-64bit, java-1_6_0-ibm-plugin, java-1_6_0-ibm-plugin-32bit, java-1_6_0-ibm-src (ZYPP Patch Number 7369)

IBM Java 6 SR9 FP1 was updated to fix a critical security bug in float number handling : - The Java Runtime Environment hangs forever when converting '2.2250738585072012e-308' to a binary floating-point number. CVE-2010-4476 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descriptio...

Foxit PDF Reader 4.2 Javascript File Write

Exploit for windows platform in category local exploits $Id: foxitreaderfilewrite.rb 11955 2011-03-14 12:01:55Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Nokia N97 - .m3u Playlist Crash (PoC)

Nokia N97 - .m3u Playlist Crash PoC !/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested o...

Fedora 13 : myproxy-5.3-1.fc13 (2011-0512)

Release 5.3 fixes a myproxy-logon security bug in MyProxy versions 5.0-5.2 that disabled server identity verification : The myproxy-logon program in MyProxy versions 5.0 through 5.2 does not enforce the check that the myproxy-server's certificate contains the expected hostname or identity. The...

Fedora 14 : myproxy-5.3-1.fc14 (2011-0514)

Release 5.3 fixes a myproxy-logon security bug in MyProxy versions 5.0-5.2 that disabled server identity verification : The myproxy-logon program in MyProxy versions 5.0 through 5.2 does not enforce the check that the myproxy-server's certificate contains the expected hostname or identity. The...

FreeBSD Ports: tarsnap

The remote host is missing an update to the system as announced in the referenced advisory. VID 2c2d4e83-2370-11e0-a91b-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID 2c2d4e83-2370-11e0-a91b-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Linux Kernel "execve()"内存扩展"OOM-killer"本地拒绝服务漏洞

BUGTRAQ ID: 45004 CVE ID: CVE-2010-4243 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"OOM-killer"功能在实现上存在安全漏洞，本地攻击者可利用此漏洞终止不相关的进程，造成拒绝服务。 漏洞源于oomkill函数看不到没有附加到任何线程的已分配内存。 Linux kernel 2.6.24.3 - 2.6.37 RedHat Enterprise Linux Desktop v.5 client 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service

!/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software: http://h71028.www7.hp.com/enterprise/w1/en/software/information-management-data-protector.html Date: 08/01/2011 Author...

Download Center 2.2 - SQL Injection

Name : MHP DownloadScript v2.2 www.Cyber-warrior.org +Greetz to All KinqSqlZ Crew --------------------------------------------------------------------------------------- DeadLy DeMon ,System-Hacker , BlackApple , HeroTurk , F0RTYS3V3N , JackTheRipper , Sadrazam and All KinqSqlZCrew Member Aklınız...

WinZip 15.0 - WZFLDVW.OCX Text Property Denial of Service

WinZip 15.0 - WZFLDVW.OCX Text Property Denial of Service Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/...

D-Link DIR-300 authentication bypass

intro Hello, I found security bug in D-Link DIR-300 wireless router. It can be used to bypass authentication mechanizm by attacker with access to web interface. I reported it to D-Link but they are not replying for my emails. According to other D-Link security holes and their status I think that...

Breaking The SetDllDirectory Protection Against Binary Planting

An old unfixed Windows functional bug was just upgraded to a security bug. Our researchers have discovered that Windows' inability to consistently expand environment variables in user and system PATH breaks the binary planting protection provided by the SetDllDirectory function. The article...

TradeMC E-Ticaret SQL Injection / Cross Site Scripting

=================================================== TradeMC E-Ticaret - SQLi/XSS Multiple Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Special Thanks : H4x0re Security 2010, inj3ct0r team Software info Web App. : TradeMC...

FAQMasterFlex 1.2 SQL Injection

Hi guys, I just found a sqli bug on FAQMasterFlex. Since the software used as one of Fantastico auto-install software package in F.A.Q software section. Author: cyb3r.anbu Software Link: http://www.lethalpenguin.net/design/faqmasterflex.php Version: 1.2 Tested on: Ubuntu...

Apache Derby Information Disclosure Vulnerability

The host is running Apache Derby and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbapachederbyinfodiscvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ Apache Derby Information Disclosure Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...

Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion

Exploit for php platform in category web applications ================================================================== Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion ================================================================== bug found by Jose Luis Gongora Fernandez...