openSUSE Security Update : postgresql (postgresql-1773)

An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions CVE-2009-4136. Embedded null bytes in the common name of SSL certificates could bypass...

HP StorageWork 1/8 G2 Tape Autoloader Privilege Escalation

DSECRG-09-011 HP StorageWorks 1/8 G2 Tape Autoloader - privilege escalation, DOS A vulnerability was found in Web Administration Interface of device HP StorageWorks 1/8 G2 Tape Autoloader. Default unprivileged user can escalate privileges to the administrator and execute DOS attack. Digital...

CentOS 5 : kernel (CESA-2008:0612)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CentOS 4 : kernel (CESA-2008:0237)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Kaspersky Lab Multiple Products Local Privilege Escalation

No description provided by source. Due to its high level of professionalism and dedication, Kaspersky Lab has become a \ market leader in the development of antivirus protection. The company’s main product, \ Kaspersky Anti-Virus, regularly receives top awards in tests conducted by respected ...

Fedora Core 12 FEDORA-2009-13039 (kernel)

The remote host is missing an update to the kernel announced via advisory FEDORA-2009-13039. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Microsoft Internet Explorer (CVE-2009-3671) Uninitialized Memory Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

FreeBSD Security Advisory FreeBSD-SA-09:16.rtld

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:16.rtld Security Advisory The FreeBSD Project Topic: Improper environment sanitization in rtld1 Category: core Module: rtld Announced: 2009-12-03 Affects:...

Oracle ctxsys.drvxtabc.create_tables Exploit

No description provided by source. EDB-ID: 10267 CVE-ID: Title: Oracle ctxsys.drvxtabc.createtables Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- ctxsys.drvxtabc.createtables -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g --...

DISA SRR Root Compromise

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Executive Summary - ----------------- Unprivileged local users can obtain root access on Unix systems where the DISA SRR scripts are run. If a remote user can introduce a file into the filesystem e.g. anonymous ftp, http upload, cdrom, samba share,...

Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit

No description provided by source. EDB-ID: 10268 CVE-ID: Title: Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit...

Code injection

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors...

CVE-2009-4150

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors...

CVE-2009-4150: Undefined Security Weakness

dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged user accounts, which has unspecified impact and local attack vectors...

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor -- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF:...

Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor

Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor -- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.MERGEWORKSPACE -- -- AUTHOR...

Oracle - SYS.LT.REMOVEWORKSPACE Evil Cursor

Oracle - SYS.LT.REMOVEWORKSPACE Evil Cursor -- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.REMOVEWORKSPACE -- --...

Oracle - ctxsys.drvxtabc.create_tables Evil Cursor

Oracle - ctxsys.drvxtabc.createtables Evil Cursor -- -- ctxsys.drvxtabc.createtablesV2.sql -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables ...

Oracle - ctxsys.drvxtabc.create_tables

Oracle - ctxsys.drvxtabc.createtables -- -- ctxsys.drvxtabc.createtables -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor

-- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.COMPRESSWORKSPACETREE -- -- AUTHOR: Andrea "bunker"...