[SECURITY] Fedora 9 Update: ntp-4.2.4p6-1.fc9

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

Apache Tomcat RemoteFilterValve Security Bypass Vulnerability

Apache Tomcat Server is running on this host and that is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache Tomcat RemoteFilterValve绕过安全限制漏洞

BUGTRAQ ID: 31698br / CVECAN ID: CVE-2008-3271br / br / Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。br / br / Apache Tomcat在检查IP地址时存在同步问题，在极少的环境下，这可能允许非允许的IP地址绕过RemoteFilterValve过滤器值并访问受保护的内容。仅在使用调试器在两个线程之间强制特定的处理序列的情况下才可以利用这个漏洞。br / Apache Tomcat 5.5.0 Apache Tomcat 4.1.0 - 4.1.31 Apache ------...

CVE-2008-3271

Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a...

CVE-2008-3271: Undefined Security Weakness

Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information via a request that is processed concurrently with another request but in a different thread, leading to an instance-variable overwrite associated with a...

CVE-2008-3646: Concurrent Execution using Shared Resource with Improper Synchronization

The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...

[SECURITY] Fedora 7 Update: rsync-2.6.9-6.fc7

Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...

MobiLink Server Detection

The remote service is a MobiLink server, a component of the Sybase SQL Anywhere package used for two-way data synchronization. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31718; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2008-0055: Concurrent Execution using Shared Resource with Improper Synchronization

Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively and only modifies the permissions afterward, which allows local users to modify copied files to cause a denial of service and possibly gain privileges...

RAPI Manager Detection

The remote service supports the Remote Applications Programming Interfaces RAPI protocol and is used by the host to manage connections from Windows Mobile / Windows CE devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if descripti...

Sybase MobiLink远程堆溢出漏洞

BUGTRAQ ID: 27914 Sybase mobilink是用于实现两个数据库之间数据同步的服务器。 MobiLink服务器在处理超长的请求数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 MobiLink服务器在处理用户名、版本和远程ID等字符串时存在堆溢出漏洞。如果远程攻击者在预认证期间向服务器提交了超过128字节的字符串的话，就可能触发这个溢出，导致执行任意指令。 Sybase MobiLink = 10.0.1.3629 厂商补丁： Sybase ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Security fix for the ALT Linux 5 package ruby version 1.8.6-alt3

Jan. 11, 2008 Kirill A. Shutemov 1.8.6-alt3 - branch based git repository - update to ruby186 svn branch revision 14091 - sync with debian 1.8.6.111-2 + CVE-2007-5162 - install libruby.so into /usr/lib bug 13951 - move arch-depended siteruby to /usr/local/ raorn@ - update macros bug 13933 - add...

CVE-2007-6077: Concurrent Execution using Shared Resource with Improper Synchronization

The session fixation protection mechanism in cgiprocess.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookieonly attribute from the DEFAULTSESSIONOPTIONS constant, which effectively causes cookieonly to be applied only to the first instantiation of CgiRequest, which allows remote...

gcaldaemon-dos.txt

Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...

CVE-2007-4410

ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops...

Design/Logic Flaw

ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops...

CVE-2007-4410

ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops...

DEBIAN-CVE-2007-4410

ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops...

CVE-2007-4410

ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops...

CVE-2007-4410

ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops...