8874 matches found
FreeBSD : drupal -- multiple vulnerabilities (12efc567-9879-11dd-a5e7-0030843d3802)
The Drupal Project reports : A logic error in the core upload module validation allowed unprivileged users to attach files to content. Users can view files attached to content which they do not otherwise have access to. If the core upload module is not enabled, your site will not be affected. A...
Gentoo Security Advisory GLSA 200505-12 (postgresql)
The remote host is missing updates announced in advisory GLSA 200505-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200505-12 (postgresql)
The remote host is missing updates announced in advisory GLSA 200505-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Security Advisory (FreeBSD-SA-08:08.nmount.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:08.nmount.asc ADV FreeBSD-SA-08:08.nmount.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-08:08.nmount.asc Authors: Thomas Reinke Copyright: Copyright c 2008...
FreeBSD Security Advisory (FreeBSD-SA-08:08.nmount.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:08.nmount.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2008-3687
Heap-based buffer overflow in the flasksecuritylabel function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users domU to execute arbitrary code via the flaskop hypercall...
CVE-2008-3687: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the flasksecuritylabel function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users domU to execute arbitrary code via the flaskop hypercall...
hpssd of hplip allows unprivileged user to trigger alert mail
The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...
MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities
MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may...
MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may exploit these issues to obtain sensitive information. MyBlog 0.9.8 is...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...
Microsoft Internet Explorer HTML Objects 'substringData()' Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because it fails to perform adequate boundary checks when handling certain HTML object data. Attackers can leverage this issue to execute arbitrary code with the privileges of the user running the applicatio...
kernel: ptrace: Unprivileged crash on x86_64 %cs corruption
Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service crash via certain ptrace calls...
Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit
No description provided by source. // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com...
kernel security update
CentOS Errata and Security Advisory CESA-2008:0237 Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...
RHEL 3 : kernel (RHSA-2008:0211)
Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
kernel: ptrace: Unprivileged crash on x86_64 %cs corruption
Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service crash via certain ptrace calls...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
Sun Java System Directory Server bind-dn Remote Privilege Escalation
The version of Sun Java System Directory Proxy Server running on the remote host is affected by an unauthorized access vulnerability. Specifically, the server fails to properly classify connections in relation to 'binddn' parameter. Successful exploitation of this issue might allow an unprivilege...
