DSA-1456-1 fail2ban

Bulletin has no description...

DSA-1453-1 tomcat5 - several vulnerabilities

Bulletin has no description...

DSA-1443-1 tcpreen buffer overflows

Bulletin has no description...

DSA-1418-1 cacti - SQL injection

Bulletin has no description...

McAfee E-Business Server验证报文处理整数溢出漏洞

McAfee e-Business Server是一款用于为存储和共享文档的企业和个人提供透明加密。 McAfee e-Business Server解析验证报文存在整数溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 提供包含超长长度值的验证报文，可导致触发整数溢出，精心构建提交数据可能以应用程序进程权限执行任意指令。 0 McAfee E-Business Server 8.5.2 McAfee E-Business Server 8.1.1 厂商解决方案 升级到最新程序： a...

DSA-1401-1 iceape - several vulnerabilities

Bulletin has no description...

DSA-1392-1 xulrunner - several vulnerabilities

Bulletin has no description...

Cisco IOS on Catalyst 6500 and Cisco 7600 Access Control List Bypass Vulnerability

Cisco IOS running on Catalyst 6500 and Cisco 7600 contains a vulnerability that could allow an unauthenticated, remote attacker to bypass configured ACLs. The vulnerability exists because the affected devices accept traffic to IP addresses that are reserved for use by the Ethernet Out-of-Band...

DSA-1375-1 openoffice.org - buffer overflow

Bulletin has no description...

WinSCP < 4.04 url protocol handler flaw

-Affected products: WinSCP 4.03 and older -Details: By default WinSCP installs url protocol handlers for the scp:// and sftp:// protocols. These could be used by malicious web content to automatically upload any file from the local system to a remote server, or automatically download files from a...

DSA-1363-1 linux-2.6

Bulletin has no description...

Microsoft MSN Messenger Video Conversation Buffer Overflow Vulnerability

Description Microsoft MSN Messenger is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application. Failed exploit attemp...

DSA-1347-1 xpdf

Bulletin has no description...

JVN#05187780 Hiki arbitrary file deletion vulnerability

Hiki contains a vulnerability that allows an arbitrary file to be deleted on a server running Hiki. This is caused by the improper handling of a session management file. Impact A remote attacker may be able to delete arbitrary files with the privilege of the user running Hiki. Solution Upgrade th...

DSA-1316-1 emacs21

Bulletin has no description...

W3M浏览器InputAnswer格式串漏洞

W3M是一款开放源代码的文字式网页浏览器。 W3M不正确过滤用户提交给格式打印函数的输入，远程攻击者可以利用漏洞进行格式串攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供。 W3M W3M 0.5.1 W3M W3M 0.3.2 .2 W3M W3M 0.3.2 .1 W3M W3M 0.3.2 W3M W3M 0.3.1 + RedHat Linux 8.0 i386 + RedHat Linux 8.0 W3M W3M 0.3 + RedHat Linux 7.3 i386 + RedHat Linux 7.3 W3M W3M 0.2.5 .1 W3M W3M 0.2.5...

DSA-1274-1 file - buffer overflow

Bulletin has no description...

DSA-1272-1 tcpdump - buffer overflow

Bulletin has no description...

DSA-1263-1 clamav

Bulletin has no description...

DoS and code execution issue in LedgerSMB < 1.1.5 and SQL-Ledger < 2.6.25

Hi; A person on the LedgerSMB core team has found a serious arbitrary code execution issue in LedgerSMB prior to 1.1.5 and SQL-Ledger. A version of SQL-Ledger which fixes this vulnerability was released today version 2.6.25. The vulnerability allows a user to specify a custom function to run when...