Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relational database management system DBMS. It was...

RedHat Security Advisory RHSA-2009:1238

The remote host is missing updates announced in advisory RHSA-2009:1238. Dnsmasq is a lightweight and easy to configure DNS forwarder and DHCP server. Core Security Technologies discovered a heap overflow flaw in dnsmasq when the TFTP service is enabled the --enable-tftp command line option, or b...

Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.3 security and enhancement update

Red Hat Application Stack v2.3 is now available. This update fixes several security issues and adds various enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Red Hat Application Stack v2.3 is an integrated open source application...

CentOS 4 / 5 : device-mapper-multipath (CESA-2009:0411)

Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The device-mapper multipath packages provide tools to manage multipath...

RedHat Security Advisory RHSA-2009:0410

The remote host is missing updates announced in advisory RHSA-2009:0410. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center KDC. An input validation flaw was...

RHEL 4 / 5 : device-mapper-multipath (RHSA-2009:0411)

Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The device-mapper multipath packages provide tools to manage multipath...

RHEL 4 : krb5 (RHSA-2009:0409)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2009:0409 advisory. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted...

RHEL 2.1 / 3 : krb5 (RHSA-2009:0410)

Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authentica...

device, kpartx security update

CentOS Errata and Security Advisory CESA-2009:0411 Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The device-mapper...

Cisco UCC / IPCC JTapi DoS

Service restart on invalid data received through TCP port...

Mandrake Linux Security Advisory : php (MDKSA-2006:074)

A cross-site scripting XSS vulnerability in phpinfo info.c in PHP = 5.1.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including 1 a large number of dimensions or 2 long values, which prevents HTML tags from being removed. CVE-2006-0996 Directory...

Design/Logic Flaw

The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active...

CVE-2006-0228

CVE-2006-0228 involves the RBAC helper in grsecurity prior to 2.1.8, where the admin role can inadvertently remain active after the admin creates a service and exits the shell without unauthenticating. This causes the service to restart with the admin role still active, giving elevated privileges...

CVE-2004-2107

Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to 1 restart the service, 2 use the getlastmsg command to view log information, or 3 use the online command to...

[SECURITY] [DSA 562-1] New mysql packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 562-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2004 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : php (MDKSA-2002:059)

A fifth parameter was added to PHP's mail function in 4.0.5 that is not properly sanitized when the server is running in safe mode. This vulnerability would allow local users and, possibly, remote attackers to execute arbitrary commands using shell metacharacters. After upgrading to these package...

Mandrake Linux Security Advisory : openssl (MDKSA-2003:098)

Two bugs were discovered in OpenSSL 0.9.6 and 0.9.7 by NISCC. The parsing of unusual ASN.1 tag values can cause OpenSSL to crash, which could be triggered by a remote attacker by sending a carefully-crafted SSL client certificate to an application. Depending upon the application targetted, the...

RHEL 2.1 : openssl (RHSA-2004:119)

Updated OpenSSL packages that fix a remote denial of service vulnerability are now available for Red Hat Enterprise Linux 2.1. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography...

IBM Director 3.1 Windows Agent Remote DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory by Juanma Merino Remote DoS on IBM Director 3.1 Agent for Windows Reported to esCERT UPC on: May 2003 no response Vendor contacted on: March 1, 2004 no response Vendor: IBM www.ibm.com Systems Affected: IBM Director 3.1 Agent for...

finjanSurfinGate.txt

VENDOR: Finjan www.finjan.com PRODUCT: SurfinGate recently renamed “Vital Security” VERSIONS: All releases of versions 6 & 7 as of 1/22/2004. Older versions have not been tested. NOTIFICATION: The vendor has known of the problem over a year DESCRIPTION...