SUSE-SU-2015:0455-1 Security update for freetype2

freetype2 was updated to fix 20 security issues. These security issues were fixed: - CVE-2014-9663: The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allowed remote attackers to cause a...

HP's Zero Day Initiative Changes Bug-Buying Guidelines

HP’s Zero Day Initiative has decided to adjust its guidelines and criteria or buying some vulnerabilities in the future, eliminating some large classes of bugs from its menu. The group, which has been among the more visible and prominent of the vulnerability purchasing programs since its inceptio...

OracleVM 2.1 : ipsec-tools (OVMSA-2009-0010)

The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-1574 racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer...

Microsoft iSCSI Denial of Service Vulnerabilities (2962485)

This host is missing an important security update according to Microsoft Bulletin MS14-028. OpenVAS Vulnerability Test $Id: gbms14-028.nasl 6769 2017-07-20 09:56:33Z teissa $ Microsoft iSCSI Denial of Service Vulnerabilities 2962485 Authors: Veerendra GG Copyright: Copyright C 2014 Greenbone...

August 2013 Microsoft Patch Tuesday Security Updates

Another month, another set of Microsoft Patch Tuesday security updates for Internet Explorer. For what seems to be the umpteenth month in a row, Microsoft will patch its browser, one of three critical updates expected to be shipped on Tuesday among eight bulletins. While IE patches remain a...

Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers (cisco-sa-20130410-asr1000)

Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR contains the following denial of service DoS vulnerabilities : - Cisco IOS XE Software IPv6 Multicast Traffic Denial of Service Vulnerability CVE-2013-1164 - Cisco IOS XE Software L2TP Traffic Denial of Service Vulnerability...

Cisco June 2013 Security Updates

Cisco’s Product Security Incident Response Team pushed out software updates for four different network security products. The fixes contain workarounds that can help users mitigate multiple denial-of-service and command-injection vulnerabilities recently found in Cisco’s software. The holes exist...

SuSE 11.2 Security Update : Linux kernel (SAT Patch Numbers 7123 / 7127)

The SUSE Linux Enterprise 11 SP2 kernel has been updated to 3.0.51 which fixes various bugs and security issues. It contains the following feature enhancements : - The cachefiles framework is now supported FATE312793, bnc782369. The userland utilities were published seperately to support this...

CentOS Update for glibc CESA-2012:0126 centos5

Check for the Version of glibc OpenVAS Vulnerability Test CentOS Update for glibc CESA-2012:0126 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mozilla Products Updater Service Privilege Escalation Vulnerabilities (Windows)

This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsupdaterservprivescvulnwin.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Updater Service Privilege Escalation Vulnerabilities Windows...

Ubuntu 10.10 : linux vulnerabilities (USN-1160-1)

Dan Rosenberg discovered that IRDA did not correctly check the size of buffers. On non-x86 systems, a local attacker could exploit this to read kernel heap memory, leading to a loss of privacy. CVE-2010-4529 Dan Rosenburg discovered that the CAN subsystem leaked kernel addresses into the /proc...

Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems

Hello Bugtraq! I want to warn you about Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems. It's additional information to my advisories about MiniManager for Project MANGOS and HoloCMS. I have reported already about Insufficient Anti-automation and Denial of...

Mozilla Firefox 'JavaScript' DoS Vulnerabilities - Sep09 (Windows)

The host is installed with Firefox browser and is prone to Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxjsdosvulnsep09win.nasl 5055 2017-01-20 14:08:39Z teissa $ Mozilla Firefox 'JavaScript' DoS Vulnerabilities - Sep09 Windows Authors: Sharath S Copyright:...

Adobe Flash Player/Air Multiple DoS Vulnerabilities (Aug 2009) - Windows

Adobe Flash Player/Air is prone to multiple Denial of Service vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP04 update

Updated JBoss Enterprise Application Platform JBoss EAP 4.3 packages that fix various issues are now available for Red Hat Enterprise Linux 4 as JBEAP 4.3.0.CP04. This update has been rated as having moderate security impact by the Red Hat Security Response Team. JBoss Enterprise Application...

WFTPD Pro 3.30 - Multiple Command Remote Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/33426/info WFTPD Pro is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle specially crafted FTP commands in a proper manner. Attackers can exploit these issues to crash the affected application, denying...

Sami FTP Server 2.0.x - Multiple Commands Remote Denial of Service Vulnerabilities

Sami FTP Server 2.0.x - Multiple Commands Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/27817/info Sami FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An attacker can...

CA License Service Multiple Vulnerabilities

The remote host is running the Computer Associate License Application. The remote version of this software is vulnerable to several flaws that could allow a remote attacker to execute arbitrary code on the remote host with SYSTEM privileges. C KK Liu Changes by Tenable: - Fixed the request -...

Magic Winmail Server 4.0 (Build 1112) - download.php Traversal Arbitrary File Access

Magic Winmail Server 4.0 Build 1112 - download.php Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface...

US-CERT Technical Cyber Security Alert TA05-026A -- Multiple Denial-of-Service Vulnerabilities in Cisco IOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA05-026A Multiple Denial-of-Service Vulnerabilities in Cisco IOS Original release date: January 26, 2005 Last revised: -- Source: US-CERT Systems Affected Cisco routers and switches running IOS in various configurations...