Scientific Linux Security Update : openldap on SL5.x i386/x86_64

A flaw was found in the way OpenLDAP handled NUL characters in the CommonName field of X.509 certificates. An attacker able to get a carefully-crafted certificate signed by a trusted Certificate Authority could trick applications using OpenLDAP libraries into accepting it by mistake, allowing the...

Scientific Linux Security Update : gdm on SL4.x i386/x86_64

A flaw was found in the way the gdm package was built. The gdm package was missing TCP wrappers support on 64-bit platforms, which could result in an administrator believing they had access restrictions enabled when they did not. CVE-2007-5079 This update also fixes the following bug : - sometime...

Eaton Network Shutdown Module Arbitrary PHP Code Execution Vulnerability

Eaton Network Shutdown Module is prone to a remote PHP code-execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Eaton Network Shutdown Module Detection

The remote web server is part of Network Shutdown Module, from Eaton Corporation formerly MGE Office Protection Systems. It is used to monitor UPS-protected computers and shut them down gracefully if AC power fails. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid6008...

Eaton Network Shutdown Module view_list.php paneStatusListSortBy Parameter eval() Call Remote PHP Code Execution

The version of the Eaton Network Shutdown Module hosted on the remote web server does not sanitize user input to the 'paneStatusListSortBy' parameter of the 'viewlist.php' script before using it as part of a command to be executed via PHP's 'eval' function. An unauthenticated, remote attacker can...

Eaton Network Shutdown Module Default Administrator Credentials

The remote Eaton Network Shutdown Module install uses a default set of credentials to control access to its administrative functionality. With this information, an attacker can gain complete access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

389-ds-base security, bug fix, and enhancement update

1.2.10.2-15 - Resolves: Bug 824014 - DS Shuts down intermittently 1.2.10.2-14 - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress -- patch 0015 fixes a small memleak in previous patch 1.2.10.2-13 - Resolves: Bug 822700 - Bad DNs in ACIs can segfault ns-slapd...

Anonymous Hackers shut down website of Colombia Justice Ministry

Anonymous Hackers shut down website of Colombia Justice Ministry Anonymous hackers shut down the websites of Colombia's Justice Ministry website on Friday evening. The website was back online Saturday morning. Also, The website of Cambio Radical, the political party of Interior Minister German...

MDVA-2012:046 : initscripts

Xorg and chvt 1 call in /etc/rc.d/rc can be deadlocking one another if shutdown is requested using ACPI or any other mean, which will cause X to stop while, at the same time, /etc/rc.d/rc0/6 is running, causing chvt 1 to be called. When this happen, chvt call is blocked and shutdown / reboot...

httpd: possible crash on shutdown due to flaw in scoreboard handling

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service daemon crash during shutdown or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free...

httpd: possible crash on shutdown due to flaw in scoreboard handling

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service daemon crash during shutdown or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free...

Autonomy Connected Backup Type 13 Command Injection (CVE-2011-2397)

A code execution vulnerability has been reported in Autonomy Connected Backup. The vulnerability is due to insufficient validation of certain commands by the Agent.exe process. A remote attacker may exploit this issue by sending a specially crafted XML file to the affected system. Successful...

CVE-2012-1662

CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote attackers to cause a denial of service service shutdown via a crafted network request...

linux/x86 Bugtraq shutdown modsecurity shellcode 64 bytes

Title :Bugtraq shutdown modsecurity -Linux/x86 shellcode 64 bytes Author : TrOoN E-mail : http://www.facebook.com/alexydant my new facebook Home : city 617 logt Draria algeria Web Site : www.1337day.com Facebook : http://www.facebook.com/alexydant my new facebook platform : Bugtraq Eng Type :...

#THN Monthly ( February ) News Archive, If you miss Something !

THN Monthly February News Archive,If you miss Something ! Censorship - Global Concern, THN Magazine March Edition : Forget terrorists attacks here are 2012's Most Vulnerable Cities At Risk for Cyber Crime Idiots : Slum Dog India demands Real time monitoring on Indian Gmail & Yahoo Emails. Do they...

httpd: possible crash on shutdown due to flaw in scoreboard handling

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service daemon crash during shutdown or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free...

FBI will shutdown the Internet on March 8

FBI will shutdown the Internet on March 8 The Internet could go dark for millions of users as early as March 8 because of a virus that has corrupted computers in more than 100 countries. Last year, authorities in Estonia apprehended six men believed responsible for creating a malicious computer...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2012:0128 Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

RHEL 6 : httpd (RHSA-2012:0128)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0128 advisory. The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 released via RHSA-2011:1391 did not...

httpd: possible crash on shutdown due to flaw in scoreboard handling

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service daemon crash during shutdown or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free...