CVE-2007-0882: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in the telnet daemon in.telnetd in Solaris 10 and 11 SunOS 5.10 and 5.11 misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the...

Mandrake Linux Security Advisory : MySQL (MDKSA-2006:149)

MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy CVE-2006-4031. The update allows the local admin to...

Solaris 2.6 (sparc) : 106718-01

The remote host is missing Sun Security Patch number 106718-01 SunScreen SKIP for Solaris 1.1.1: patch for /etc mode in packaging. Date this patch was last updated by Sun : Wed Sep 09 18:00:00 MDT 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATE...

Solaris 2.5.1 (i386) : 106719-01

The remote host is missing Sun Security Patch number 106719-01 SunScreen SKIP for Solaris 1.1.1: x86 patch for /etc mode in packaging. Date this patch was last updated by Sun : Wed Sep 09 18:00:00 MDT 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

Solaris 2.5.1 (sparc) : 106718-01

The remote host is missing Sun Security Patch number 106718-01 SunScreen SKIP for Solaris 1.1.1: patch for /etc mode in packaging. Date this patch was last updated by Sun : Wed Sep 09 18:00:00 MDT 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATE...

Solaris 2.6 (i386) : 106719-01

The remote host is missing Sun Security Patch number 106719-01 SunScreen SKIP for Solaris 1.1.1: x86 patch for /etc mode in packaging. Date this patch was last updated by Sun : Wed Sep 09 18:00:00 MDT 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

Fix ipv6 exthdr bug causing Oops

The selinuxparseskbipv6 function in security/selinux/hooks.c in the Linux kernel before 2.6.12-rc4 allows remote attackers to cause a denial of service OOPS via vectors associated with an incorrect call to the ipv6skipexthdr function...