RedHat Security Advisory RHSA-2009:1485

The remote host is missing updates announced in advisory RHSA-2009:1485. PostgreSQL is an advanced object-relational database management system DBMS. It was discovered that the upstream patch for CVE-2007-6600 included in the Red Hat Security Advisory RHSA-2008:0039 did not include protection...

postgresql security update

CentOS Errata and Security Advisory CESA-2009:1484 Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...

CentOS 3 : postgresql (CESA-2009:1485)

Updated postgresql packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relational database management system DBMS. It was discover...

rh security update

CentOS Errata and Security Advisory CESA-2009:1485 Updated postgresql packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relation...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relational database management system DBMS. It was discover...

SIDVault 'simple_bind()' Function Multiple Remote Buffer Overflow Vulnerabilities

SIDVault is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds- check user-supplied input before copying it to an insufficiently sized memory buffer. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a...

Asante FM2008 backdoor account

Undocumented superuser/asante account...

Linux Kernel 2.6.30 - 'tun_chr_pool()' Null Pointer Dereference

source: https://www.securityfocus.com/bid/35724/info The Linux kernel is prone to a local NULL-pointer dereference vulnerability. A local attacker can exploit this issue to execute arbitrary code with superuser privileges or crash an affected kernel, denying service to legitimate users. This issu...

Linux Kernel 2.6.30 - tun_chr_pool() Null Pointer Dereference

Linux Kernel 2.6.30 - tunchrpool Null Pointer Dereference source: https://www.securityfocus.com/bid/35724/info The Linux kernel is prone to a local NULL-pointer dereference vulnerability. A local attacker can exploit this issue to execute arbitrary code with superuser privileges or crash an...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to "execute old updates" that modif...

CVE-2008-6532

Multiple cross-site request forgery CSRF vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to "execute old updates" that modif...

CVE-2008-6532

Multiple cross-site request forgery CSRF vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to "execute old updates" that modif...

CVE-2008-6532

CVE-2008-6532 describes multiple CSRF vulnerabilities in Drupal’s update feature. Affected software: Drupal 5.x before 5.13 and 6.x before 6.7. The issue enables remote attackers to cause the superuser to perform unauthorized actions via unspecified vectors, exemplified by the superuser executing...

Sun xVM VirtualBox 2.02.1 - Local Privilege Escalation

Sun xVM VirtualBox 2.02.1 - Local Privilege Escalation source: https://www.securityfocus.com/bid/34080/info Sun xVM VirtualBox is prone to a local privilege-escalation vulnerability. An attacker can exploit this vulnerability to run arbitrary code with superuser privileges. The following versions...

FreeBSD 'telnetd' Daemon Remote Code Execution Vulnerability

FreeBSD is prone to a remote code-execution vulnerability. Remote attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will facilitate in the complete compromise of affected computers. FreeBSD 7.0-RELEASE is vulnerable; other...

RHEL 5 : sudo (RHSA-2009:0267)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:0267 advisory. The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root with logging. A flaw was...

FreeBSD : drupal -- multiple vulnerabilities (609c790e-ce0a-11dd-a721-0030843d3802)

The Drupal Project reports : The update system is vulnerable to Cross site request forgeries. Malicious users may cause the superuser user 1 to execute old updates that may damage the database. When an input format is deleted, not all existing content on a site is updated to reflect this deletion...

drupal -- multiple vulnerabilities

The Drupal Project reports: The update system is vulnerable to Cross site request forgeries. Malicious users may cause the superuser user 1 to execute old updates that may damage the database. When an input format is deleted, not all existing content on a site is updated to reflect this deletion...

[BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0

BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac into a file transfer server. Rumpus...

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description...