[security bulletin] HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01362558 Version: 1 HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted...

Critical: Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 6 security update

An updated redhat-ds package that addresses a security issue is now available as Red Hat Directory Server 7.1, Service Pack 6. This update has been rated as having critical security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant directory server. A...

Server: insufficient buffer size for search patterns

Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service slapd crash and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression...

Important: Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 5 security update

An updated redhat-ds package that addresses a security issue is now available as Red Hat Directory Server 7.1, Service Pack 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3-compliant directory server. A...

PT-2008-1509 · Macrovision · Installshield Installscript One-Click Install (Oci) Activex Control

Name of the Vulnerable Software and Affected Versions: Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control version 12.0 before SP2 Description: The issue concerns the failure of the Macrovision InstallShield InstallScript One-Click Install OCI ActiveX control to validate...

MS Windows Explorer Unspecified . DOC File Denial of Service Exploit-vulnerability warning-the black bar safety net

MS Windows Explorer Unspecified . DOC File Denial of Service Exploit Download the file anywhere excluding on the desktop and try to browse it with the Windows explorer and you'll see how it crashes ! - Tested on Windows XP Service Pack 1 and Service Pack 2. Hope the latest Microsoft fixes will fi...

Microsoft Windows Explorer - '.doc' File Denial of Service

MS Windows Explorer Unspecified .DOC File Denial of Service Exploit Download the file anywhere excluding on desktop and try to browse it with the Windows explorer and you'll see how it crashes ! - Tested on Windows XP Service Pack 1 and Service Pack 2. Hope the latest Microsoft fixes will fix tha...

MS Windows Explorer Unspecified .DOC File Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================================== MS Windows Explorer Unspecified .DOC File Denial of Service Exploit =================================================================== MS Windows Explorer Unspecified .DOC File...

DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability

Title ----- DDIVRT-2008-10 PacketTrap PT360 Tool Suite TFTP Arbitrary File Access Severity -------- High Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: princeofnigeria and r@b13$ Date Discovered --------------- 1/29/2008 Vulnerability Description...

Microsoft Office 2003 - .wps Local Stack Overflow (MS08-011)

Microsoft Office 2003 - .wps Local Stack Overflow MS08-011 / Copyright c 2008 chujwamwdupe - pumpernikiel.c one day in teletubby land... an email from idefense: "Unfortunately, Microsoft has refused to credit you using the name you requested." ...what's wrong with 'chujwamwdupe', eh? Description:...

Microsoft Excel rtAFDesc record invalid pointer access

Added: 01/17/2008 CVE: CVE-2008-0081 BID: 27305 OSVDB: 40344 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem Microsoft Excel references an uninitialized pointer if a spreadsheet contains an improperly placed...

CVE-2007-6509

Unspecified vulnerability in Appian Enterprise Business Process Management BPM Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp...

IBM AIX 5300-06 Service Pack 4和5300-07技术级别修正多个未明漏洞

BUGTRAQ ID: 26825 CNCAN ID:CNCAN-2007121205 IBM AIX是一款商业性质的操作系统。 IBM AIX 5300-06 Service Pack 4和5300-07 Technology Level修正了多个安全问题，目前没有详细漏洞细节提供。 IBM AIX 5.3 安装和使用IBM AIX 5300-06 Service Pack 4和5300-07 Technology Level：...

SuSE 10 Security Update : cron (ZYPP Patch Number 3831)

By setting hard links to /etc/crontab users were able to prevent cron from running scheduled jobs. CVE-2007-1856 A re-emerged symlink bug allowed users to edit the crontab of other users. CVE-2005-1038 This is a reissue of the SLES10 update after Service Pack 1, since Service Pack 1 merge lost so...

Microsoft Security Bulletin MS07-069 - Critical Cumulative Security Update for Internet Explorer (942615)

Microsoft Security Bulletin MS07-069 - Critical Cumulative Security Update for Internet Explorer 942615 Published: December 11, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves four privately reported vulnerabilities. The most serious security impact...

PT-2007-6957 · Rigs Of Rods Team · Rigs Of Rods

Name of the Vulnerable Software and Affected Versions: Rigs of Rods RoR versions prior to 0.33d SP1 Description: The issue is related to a buffer overflow in the Sequencer::queueMessage function, which can be triggered by sending a nickname and then a vehicle name in a MSG2 USE VEHICLE message wi...

openSUSE 10 Security Update : xen (xen-4616)

This update merges back the Xen version from SLES 10 Service Pack 1 to the 10.1 codebase, which should make it work again. Nevertheless we recommend Xen users to use the latest openSUSE release 10.3 for Xen usage. Additionaly a /tmp race was fixed CVE-2007-3919. %NASLMINLEVEL 70300 C Tenable...

Microsoft Office Service Pack Out of Date

The remote version of Microsoft Office has no service pack or the one installed is no longer supported. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid27525; scriptversion"1.32"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01";...

Windows Service Pack Out-of-Date

The remote version of Microsoft Windows has no service pack or the one installed is no longer supported. As a result, it is likely to contain security vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid26921; scriptversion"1.41";...

windowslive-remote.txt

Windows live Messenger malformed file overflow remote exploitation. windows ole32.dll ms07-024 windows GDI MS07-046 vendor url: http://www.microsoft.com/ , http://get.live.com/messenger/overview Advisore: http://lostmon.blogspot.com/2007/09/ windows-live-messenger-jpg-overflow.html Vendor...