postfix security update

2:2.6.6-2.1 - fix CVE-2011-0411 682978...

PT-2010-1042 · Linux +1 · Linux-Pam +1

Name of the Vulnerable Software and Affected Versions: Linux-PAM versions prior to 1.1.2 Red Hat Enterprise Linux pam-devel version 1.1.1 Red Hat Enterprise Linux pam-debuginfo version 1.1.1 Red Hat Enterprise Linux pam version 1.1.1 Description: The issue concerns multiple vulnerabilities in the...

freetype security update

2.1.4-18.el3 - Modify freetype-2.1.4-CVE-2010-3054.patch - Resolves: 638139 2.1.4-17.el3 - Add freetype-2.1.4-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add freetype-2.1.4-CVE-2010-3311.patch Don't seek behind end of stream. - Add freetype-2.1.4-CVE-2010-3054.patch...

Mozilla Firefox Unspecified Vulnerability (Mar 2010) - Linux

mozilla Firefox is prone to an unspecified vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

P forum vulnerable to directory traversal

Overview P forum from Rocomotion contains a directory traversal vulnerability. P forum from Rocomotion is a bulletin board software. P forum contains a directory traversal vulnerability. Shuya Ueki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

PT-2009-5895 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31.4 Description: The issue allows local users to cause a denial of service, resulting in a system hang. This occurs when an abstract-namespace AF UNIX listening socket is created, a shutdown operation is...

PT-2009-5283 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 2.0.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the items number parameter in the comments.php file. Recommendations: For versions prior to 2.0.3, update to...

Update of jcaptcha

Update version of jcaptcha that we use...

PT-2009-1016 · Xmlsoft +2 · Libxml +3

Name of the Vulnerable Software and Affected Versions: libxml2 versions 2.5.10 through 2.6.32 libxml version 1.8.17 Description: The issue allows context-dependent attackers to cause a denial of service, resulting in an application crash, via crafted Notation or Enumeration attribute types in an...

openSUSE Security Update : gvim (gvim-561)

The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...

Movable Type access restriction bypass vulnerability

Overview Movable Type contains an access restriction bypass vulnerability. Movable Type, a web log system from Six Apart KK, contains a vulnerability that allows a remote attacker to bypass access restrictions. A successful attack requires mt-wizard.cgi not to be deleted after initial setup. For...

HP Systems Insight Manager Unauthorized Access Vulnerability (Linux)

This host is running HP Systems Insight Manager SIM and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbhpsimunauthaccessvulnlin.nasl 4218 2016-10-05 14:20:48Z teissa $ HP Systems Insight Manager Unauthorized Access Vulnerability Linux Authors: Chandan S Copyright:...

php security and bug fix update

4.3.9-3.22.12 - set higher memorylimit in /usr/bin/pear 263501 4.3.9-3.22.11 - update to PEAR 1.4.9, matching RHEL-5 263501 bundle XMLRPC-1.5.0, ConsoleGetopt-1.2, ArchiveTar-1.3.1 fix paths in default pear.conf, installed PEAR registry replace /usr/bin/pear et al with simpler wrapper scripts...

projectpier-xssxsrf.txt

====================================================================== ProjectPier Impact: Cross Site Scripting Cross Site Request Forgery Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ProjectPier Version: = 0.80...

PT-2008-2278

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions prior to 8.1.2 Description The issue concerns multiple unspecified vulnerabilities in Adobe Reader and Acrobat. The impact and attack vectors of these vulnerabilities are unknown. Recommendations For versions...

PT-2006-5462 · Phpopenchat · Phpopenchat

Name of the Vulnerable Software and Affected Versions: phpopenchat versions prior to 3.0.2 Description: The issue allows remote attackers to execute arbitrary PHP code via the sourcedir parameter in the contrib/yabbse/poc.php file. A dispute regarding this issue was raised by a third-party...

PT-2005-2892 · Silvercity · Silvercity

Name of the Vulnerable Software and Affected Versions: SilverCity versions prior to 0.9.5-r1 Description: The issue allows local users to execute arbitrary code due to the installation of certain files with read and write world permissions. The affected files include cgi-styler-form.py,...

[SA14746] Smart Cache Forwarder Denial of Service Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Smart Cache Forwarder Denial of Service Vulnerability...

[SA14372] ArGoSoft FTP Server "SITE COPY" Shortcuts Security Issue

TITLE: ArGoSoft FTP Server "SITE COPY" Shortcuts Security Issue SECUNIA ADVISORY ID: SA14372 VERIFY ADVISORY: http://secunia.com/advisories/14372/ CRITICAL: Less critical IMPACT: Unknown WHERE: From remote SOFTWARE: ArGoSoft FTP Server 1.4.x http://secunia.com/product/2260/ DESCRIPTION: Cirpian...

[SA14342] IRM LDAP Login Security Bypass Vulnerability

TITLE: IRM LDAP Login Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14342 VERIFY ADVISORY: http://secunia.com/advisories/14342/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: IRM 1.x http://secunia.com/product/4681/ DESCRIPTION: Fulvio Civitareale has...