Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability Advisory ID: cisco-sa-20100324-sccp Revision 1.0 For Public Release 2010 March 24 1600 UTC GMT...

Mandriva Update for mmc-wizard MDVA-2010:095 (mmc-wizard)

Check for the Version of mmc-wizard OpenVAS Vulnerability Test Mandriva Update for mmc-wizard MDVA-2010:095 mmc-wizard Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

SA-CONTRIB-2010-022 - Internationalization - Arbitrary code execution

The Internationalization module enables translation of user defined strings using Drupal's locale interface. Some of these user defined strings have Input formats associated with them. As translators can translate texts before they go through the Input filters, using some filters like the PHP...

Fedora 11 : gimp-2.6.8-1.fc11 (2009-11880)

Overview of Changes from GIMP 2.6.7 to GIMP 2.6.8 ================================================= Bugs fixed: 470698 - MapObject cannot modify highlight 593848 - FG color changed to black when FG- BG Editor tab created 594651 - layer.scale raises RuntimeError 594998 - Keyboard shortcuts does no...

CVE-2010-0566

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

Code injection

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...

Cross site scripting

Cross-site scripting XSS vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.21, 8.12.7, and 8.05; allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not...

Mandriva Update for mmc MDVA-2010:044 (mmc)

Check for the Version of mmc OpenVAS Vulnerability Test Mandriva Update for mmc MDVA-2010:044 mmc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for urpmi MDVA-2010:045 (urpmi)

Check for the Version of urpmi OpenVAS Vulnerability Test Mandriva Update for urpmi MDVA-2010:045 urpmi Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Cisco Secure Desktop 3.x - 'translation' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37960/info Cisco Secure Desktop is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

CentOS 4 / 5 : elinks (CESA-2009:1471)

An updated elinks package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. ELinks is a text-based Web browser. ELinks does not display any images, but it does...

Security fix for the ALT Linux 6 package fetchmail version 6.3.13-alt1

Jan. 1, 2010 Afanasov Dmitry 6.3.13-alt1 - 6.3.13 + new "softbounce" global option; + CVE-2009-2666: improper SSL/TLS X.509 certificates validation fixed in 6.3.11; + translation updates; see NEWS for details...

Fedora 11 : cups-1.4.2-7.fc11 (2009-10891)

Updated to 1.4.2 including XSS security fix CVE-2009-2820. Fixed improper reference counting in abstract file descriptors handling interface CVE-2009-3553. Fixed admin.cgi crash when modifying a class. Fix cups-lpd to create unique temporary data files. Pass through serial parameters correctly in...

RHEL 4 / 5 : elinks (RHSA-2009:1471)

An updated elinks package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. ELinks is a text-based Web browser. ELinks does not display any images, but it does...

Important: Red Hat Security Advisory: elinks security update

An updated elinks package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. ELinks is a text-based Web browser. ELinks does not display any images, but it does...

SuSE9 Security Update : mailman (YOU Patch Number 12224)

This update of mailman fixes a cross-site scripting bug CVE-2008-0564 and a mistake in translation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41233;...

[SECURITY] Fedora 10 Update: kdesdk-4.3.1-1.fc10

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

evil little dictionary

Subject: stardict broadcasts clipboard context over network Package: stardict Version: 3.0.1-4.1 Justification: user security hole Severity: grave Tags: security Please type your report below this line In default config "enable net dict" is selected, it attempts to grab clipboard and sends it ove...

MDKA-2007:105 : mdk-menu-messages

The spanish translation was not up-to-date which resulted in the More sections not being translated in the esES locale. A bug in the menu-messages Makefile led to translations of contrib overriding those of main. The updated packages solve these problems and also contains some updated translation...

MDKA-2007:115 : sound-juicer

A bug in sound-juicer could lead to locking the CD drive, preventing erasing or rewriting rewritable medias in it. This package fixes this bug and includes other stability fixes and translation updates. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is n...