59 matches found
OpenJDK: excessive default UDP socket limit under SecurityManager (Networking, 7032417)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote attackers to affect integrity via unknown vectors related to Networking...
Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2011-10) (BEAST)
A flaw was found in the Java RMI Remote Method Invocation registry implementation. A remote RMI client could use this flaw to execute arbitrary code on the RMI server running the registry. CVE-2011-3556 A flaw was found in the Java RMI registry implementation. A remote RMI client could use this...
Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : openjdk-6, openjdk-6b18 regression (USN-1263-2) (BEAST)
USN-1263-1 fixed vulnerabilities in OpenJDK 6. The upstream patch for the chosen plaintext attack on the block-wise AES encryption algorithm CVE-2011-3389 introduced a regression that caused TLS/SSL connections to fail when using certain algorithms. This update fixes the problem. We apologize for...
USN-1263-2: OpenJDK 6 regression
USN-1263-1 fixed vulnerabilities in OpenJDK 6. The upstream patch for the chosen plaintext attack on the block-wise AES encryption algorithm CVE-2011-3389 introduced a regression that caused TLS/SSL connections to fail when using certain algorithms. This update fixes the problem. We apologize for...
USN-1263-1: IcedTea-Web, OpenJDK 6 vulnerabilities
Deepak Bhole discovered a flaw in the Same Origin Policy SOP implementation in the IcedTea web browser plugin. This could allow a remote attacker to open connections to certain hosts that should not be permitted. CVE-2011-3377 Juliano Rizzo and Thai Duong discovered that the block-wise AES...
Critical: java-1.6.0-openjdk
Issue Overview: A flaw was found in the Java RMI Remote Method Invocation registry implementation. A remote RMI client could use this flaw to execute arbitrary code on the RMI server running the registry. CVE-2011-3556 A flaw was found in the Java RMI registry implementation. A remote RMI client...
CentOS Update for kernel CESA-2009:1222 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for kernel CESA-2009:1222 centos5 i386
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2009:1222 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
RedHat Security Advisory RHSA-2009:1457
The remote host is missing updates announced in advisory RHSA-2009:1457. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: Michael Tokarev reported a flaw in the Realtek r8169 Ethernet driver in the Linux kernel...
kernel: udp socket NULL ptr dereference
The udpsendmsg function in the UDP implementation in 1 net/ipv4/udp.c and 2 net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash via vectors involving the MSGMORE flag and a UDP socket...
RedHat Security Advisory RHSA-2009:1233
The remote host is missing updates announced in advisory RHSA-2009:1233. The kernel packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: a flaw was found in the SOCKOPSWRAP macro in the Linux kernel. This macro did no...
kernel security update
CentOS Errata and Security Advisory CESA-2009:1223 Updated kernel packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux...
bind security and bug fix update
20:9.2.4-25.el3 - security fix for remote DoS CVE-2009-0696, 514292 20:9.2.4-24.el3 - abort timeout queries to reduce the number of open UDP sockets 498164 - handle EMFILE error from accept gracefully 498164...
Ubuntu 4.10 / 5.04 / 5.10 : ucd-snmp vulnerability (USN-190-2)
USN-190-1 fixed a vulnerability in the net-snmp library. It was discovered that the same problem also affects the ucs-snmp implementation which is used by the Cyrus email server. Original advisory : A remote Denial of Service has been discovered in the SMNP Simple Network Management Protocol...
USN-190-1: SNMP vulnerability
A remote Denial of Service has been discovered in the SMNP Simple Network Management Protocol library. If a SNMP agent uses TCP sockets for communication, a malicious SNMP server could exploit this to crash the agent. Please note that by default SNMP uses UDP sockets...
CVE-2001-0324
Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash...
CVE-2001-0324
Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash...
CVE-2001-0324
The vulnerability (CVE-2001-0324) affects Windows 98 and Windows 2000 Java clients. A Java applet can open a large number of UDP sockets, the underlying cause being excessive UDP socket creation, which prevents the host from establishing additional UDP connections and can lead to a crash. No expl...
Windows client UDP exhaustion denial of service
Georgi Guninski security advisory 37, 2001 Windows client UDP exhaustion denial of service Systems affected: Windows 2000 Prof, Windows 98 probably other Windowses Risk: Low Date: 6 February 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may distribute it unmodified. Yo...