Caldera OpenServer 5.0.x XSCO Color Database File Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4985/info OpenServer is commercial Unix operating system originally developed by SCO, and distributed by Caldera. It may be possible for a local user to gain elevated privileges. When Xsco is executed, and an excessively...

Siemens Reliant UNIX 5.4 ppd -T Race Condition Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2606/info Reliant Unix is a variant of the UNIX Operating System distributed by Fujitsu-Siemens. Reliant Unix is a scalable UNIX Operating system designed for use on Siemens servers. A problem in the operating system coul...

Apache 1.3 Artificially Long Slash Path Directory Listing Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementatio...

IBM AIX 4.x enq Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2034/info AIX is a variant of the UNIX Operating System, distributed by IBM. A problem exists that may allow elevation of user priviledges. The problem occurs in the enq program. It is reported that an overflow exists in...

IBM AIX 4.x setsenv Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2032/info AIX is a version of the UNIX Operating System distributed by IBM. A problem exists that could allow a user elevated priviledges. The problem occurs in the setsenv binary. It has been reported that a buffer...

JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Install)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and 6 through Update 38, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process of the client...

[SECURITY] Fedora 16 Update: freeciv-2.3.3-1.fc16

Freeciv is a turn-based, multi-player, X based strategy game. Freeciv is generally comparable to, and has compatible rules with, the Civilization IIR game by MicroproseR. In Freeciv, each player is the leader of a civilization, and is competing with the other players in order to become the leader...

IBM AIX和Virtual I/O Server 'dupmsg'系统呼叫本地拒绝服务漏洞

BUGTRAQ ID: 54706 CVE ID: CVE-2012-0723 AIX是一个基于开放标准的UNIX操作系统，为用户提供企业信息技术基础架构。Virtual I/O Server 提供了命令行的管理方式，通过命令行可以管理VIOS。 IBM AIX和Virtual I/O Server在导出"dupmsg"内核扩展调用到用户空间时存在错误，在实现上存在本地拒绝服务漏洞，攻击者可利用此漏洞使受影响计算机崩溃。 0 IBM AIX 7.x IBM AIX 6.x IBM AIX 5.x IBM Virtual I/O Server VIOS 2.x 厂商补丁： IBM ---...

HP-UX Containers未明特权提升漏洞

Bugtraq ID: 50396 CVE ID：CVE-2011-3164 HP-UX是一款商业性质的UNIX操作系统。 HP-UX Containers SRP存在安全问题，恶意本地用户利用漏洞获得未授权访问并提升特权。 要成功利用漏洞需要安装了PHKL42310补丁 HP HP-UX Containers A.03.01 HP HP-UX Containers A.03.00.002 HP HP-UX Containers A.03.00 厂商解决方案 HP HP-UX Containers A.03.01.001已经修复此漏洞，建议用户下载使用： http://www.hp.co...

John The Ripper 1.7.7 Jumbo 5 - Latest Release Download

John The Ripper 1.7.7 Jumbo 5 - Latest Release Download New version of John The Ripper has been released, John the Ripper is a free password cracking software tool. Initially developed for the UNIX operating system, it currently runs on fifteen different platforms 11 architecture-specific flavors...

subversion security update

1.6.11-7.1 - add security fixes for CVE-2010-4644, CVE-2010-4539 672676...

[SECURITY] Fedora 14 Update: bugzilla-3.6.3-1.fc14

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

httpd: Reverse proxy sends wrong responses after time-outs

modproxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in...

Unix Operating System Unsupported Version Detection

According to its self-reported version number, the Unix operating system running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. TRUSTED...

[SECURITY] Fedora Core 6 Update: kernel-2.6.22.4-45.fc6

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability

Linux Kernel cpuset tasks Information Disclosure Vulnerability iDefense Security Advisory 06.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 07, 2007 I. BACKGROUND Linux is a clone of the UNIX operating system, written from scratch by Linus Torvalds with assistance from a...

IBM AIX LSMCode本地权限提升漏洞

IBM AIX是一款商业性质的UNIX操作系统。 本地攻击者可以利用IBM AIX的lsmcode命令中的权限提升漏洞以超级用户权限执行任意指令。 IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.ers.ibm.com/...

Important: Red Hat Security Advisory: cups security update

Updated CUPS packages that fix multiple security issues are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating...

CVE-2005-2663

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file...

Sun Java: Web Start argument injection vulnerability

Background Sun provides implementations of Java Development Kits JDK and Java Runtime Environments JRE. These implementations provide the Java Web Start technology that can be used for easy client-side deployment of Java applications. Description Jouko Pynnonen discovered that Java Web Start...