MDVA-2011:000 : openoffice.org

This is a bugfix and maintenance advisory that upgrades OpenOffice.org to the 3.2.1 version. Additionally a couple of Mandriva reported bugs has been fixed as described as follows: Openoffice.org status bar items got hidden whenever using openoffice.org-kde4 package integration. Viewing...

Oracle数据库CREATE_CHANGE_SET过程SQL注入漏洞

BUGTRAQ ID: 43956 CVE ID: CVE-2010-2415 Oracle是大型的商业数据库系统。 Oracle数据库的Change Data Capture组件中提供了一个DBMSCDCPUBLISH PL/SQL软件包，该软件包的CREATECHANGESET过程中存在SQL注入漏洞。恶意用户可以以特殊参数调用有漏洞的过程，导致以SYS用户的权限执行SQL语句。 利用这个漏洞要求拥有对SYS.DBMSCDCPUBLISH软件包的EXECUTE权限。默认下给予了EXECUTECATALOGROLE角色的用户拥有这个权限。 Oracle Database 11.2.0....

Solaris rpc.cmsd服务远程整数溢出漏洞

BUGTRAQ ID: 43933 CVE ID: CVE-2010-3509 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris中所运行的rpc.cmsd服务存在整数溢出漏洞，远程攻击者可以通过向该服务提交恶意RPC请求触发这个溢出，导致拒绝服务或以root用户权限执行任意代码。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10.0x86 Sun Solaris 10.0 厂商补丁： Oracle ------...

Oracle Sun Java System Web Server - HTTP Response Splitting

Oracle Sun Java System Web Server - HTTP Response Splitting Description Security-Assessment.com discovered that is possible to successfully perform an HTTP Response Splitting attack against applications served by Sun Java System Web Server. The vulnerability can be exploited if user supplied inpu...

Oracle Sun Java System Web Server - HTTP Response Splitting

Description Security-Assessment.com discovered that is possible to successfully perform an HTTP Response Splitting attack against applications served by Sun Java System Web Server. The vulnerability can be exploited if user supplied input is used to generate the value of an HTTP header, as shown ...

Java Runtime CMM readMabCurveData Buffer Overflow

Added: 10/04/2010 CVE: CVE-2010-0838 BID: 39069 OSVDB: 63500 Background Oracle Java SE and Java for Business are development platforms for developing and deploying Java applications. They include the Java SE Development Kit JDK and the Java Runtime Environment JRE. The JRE provides the minimum...

Mandriva Security Advisory MDVSA-2009:341 (dstat)

The remote host is missing an update to dstat announced via advisory MDVSA-2009:341. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Debian Security Advisory DSA 1836-1 (fckeditor)

The remote host is missing an update to fckeditor announced via advisory DSA 1836-1. OpenVAS Vulnerability Test $Id: deb18361.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1836-1 fckeditor Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:0446

The remote host is missing updates announced in advisory RHSA-2009:0446. modjk is an Apache Tomcat connector that allows Apache Tomcat and the Apache HTTP Server to communicate with each other. An information disclosure flaw was found in modjk. In certain situations, if a faulty client set the...

Oracle Secure Backup login.php rbtool command injection

Added: 01/20/2009 CVE: CVE-2008-5448 BID: 33177 OSVDB: 51342 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows a remote attacker to execute arbitrary...

Oracle Secure Backup login.php rbtool command injection

Added: 01/20/2009 CVE: CVE-2008-5448 BID: 33177 OSVDB: 51342 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows a remote attacker to execute arbitrary...

Gentoo Security Advisory GLSA 200508-20 (phpgroupware)

The remote host is missing updates announced in advisory GLSA 200508-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200603-12 (zoo)

The remote host is missing updates announced in advisory GLSA 200603-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

php -- multiple vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. VID 7fcf1727-be71-11db-b2ec-000c6ec775d9 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Microsoft Office WPG Image File Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious WPG WordPerfect Graphics file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the...

CA eTrust Secure Content Manager eCSqdmn远程拒绝服务漏洞

BUGTRAQ ID: 28888 eTrust Secure Content Manager（eTrust SCM）是独立、统一的网关解决方案，能够帮助企业从中央管理控制台防范资料窃密以及网络和信息传递威胁。 eTrust通用服务（传输）守护程序（eCSqdmn）处理用户提交的畸形数据时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 监听在1882端口上的eTrust通用服务（传输）守护程序（eCSqdmn）没有检查客户端所传送的32位数字，如果远程攻击者在这个位置使用了畸形值的话，就会导致服务崩溃（但几秒钟后会自动重启），或触发死循环，导致100%的CPU使用率。 Compute...

Critical: Red Hat Security Advisory: seamonkey security update (was mozilla)

Updated seamonkey packages that fix several security bugs in the mozilla package are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and...

[SECURITY] [DSA 296-1] New kdebase packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 296-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2003 http://www.debian.org/security/faq -...