3962 matches found
RHEL 5 : openswan (RHSA-2009:0402)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0402 advisory. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provi...
Ubuntu USN-742-1 (jasper)
The remote host is missing an update to jasper announced via advisory USN-742-1. It was discovered that JasPer did not correctly handle memory allocation when parsing certain malformed JPEG2000 images. If a user were tricked into opening a specially crafted image with an application that uses...
openswan: Insecure auxiliary /tmp file usage (symlink attack possible)
The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2 ipsec.olts.remote.log temporary files. NOTE: in many distributions and the upstream...
DSA-1760-1 openswan - denial of service
Bulletin has no description...
Untrusted applet causes DoS by filling up disk space
Sun Java Runtime Environment JRE 1.5.06 and earlier, JDK 1.5.06 and earlier, and SDK 1.5.06 and earlier allows remote attackers to cause a denial of service disk consumption by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory...
Untrusted applet causes DoS by filling up disk space
Sun Java Runtime Environment JRE 1.5.06 and earlier, JDK 1.5.06 and earlier, and SDK 1.5.06 and earlier allows remote attackers to cause a denial of service disk consumption by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory...
Ubuntu Update for cupsys vulnerabilities USN-563-1
Ubuntu Update for Linux kernel vulnerabilities USN-563-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5631.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for cupsys vulnerabilities USN-563-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for amarok vulnerability USN-657-1
Ubuntu Update for Linux kernel vulnerabilities USN-657-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6571.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for amarok vulnerability USN-657-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for emacs21, emacs22 vulnerabilities USN-607-1
Ubuntu Update for Linux kernel vulnerabilities USN-607-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6071.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for emacs21, emacs22 vulnerabilities USN-607-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for openoffice.org, openoffice.org-amd64 vulnerabilities USN-677-1
Ubuntu Update for Linux kernel vulnerabilities USN-677-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6771.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openoffice.org, openoffice.org-amd64 vulnerabilities USN-677-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...
Ubuntu: Security Advisory (USN-607-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-657-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Core 10 FEDORA-2009-2651 (pdfjam)
The remote host is missing an update to pdfjam announced via advisory FEDORA-2009-2651. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 9 FEDORA-2009-2655 (pdfjam)
The remote host is missing an update to pdfjam announced via advisory FEDORA-2009-2655. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
USN-742-1: JasPer vulnerabilities
It was discovered that JasPer did not correctly handle memory allocation when parsing certain malformed JPEG2000 images. If a user were tricked into opening a specially crafted image with an application that uses libjasper, an attacker could cause a denial of service and possibly execute arbitrar...
Mandrake Security Advisory MDVSA-2009:070 (openoffice.org)
The remote host is missing an update to openoffice.org announced via advisory MDVSA-2009:070. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
GLSA-200903-18 : Openswan: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200903-18 Openswan: Insecure temporary file creation Dmitry E. Oboukhov reported that the IPSEC livetest tool does not handle the ipseclive.conn and ipsec.olts.remote.log temporary files securely. Impact : A local attacker could...
Openswan: Insecure temporary file creation
Background Openswan is an implementation of IPsec for Linux. Description Dmitry E. Oboukhov reported that the IPSEC livetest tool does not handle the ipseclive.conn and ipsec.olts.remote.log temporary files securely. Impact A local attacker could perform symlink attacks to execute arbitrary code...
PDFjam: Multiple vulnerabilities
Background PDFjam is a small collection of shell scripts to edit PDF documents, including pdfnup, pdfjoin and pdf90. Description Martin Vaeth reported multiple untrusted search path vulnerabilities CVE-2008-5843. Marcus Meissner of the SUSE Security Team reported that temporary files are created...