Important: Red Hat Security Advisory: procmail security update

Updated procmail packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2014-4864

CVE-2014-4864 affects the NETGEAR ProSafe Plus Configuration Utility. The issue is that configuration backup files created by the utility expose passwords in plaintext, enabling (where backup files are accessible) an attacker to obtain sensitive credentials. The linked sources indicate this affec...

CVE-2014-4864

The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a file...

MGASA-2014-0373 Updated procmail packages fix CVE-2014-3618

Updated procmail package fixes security vulnerability: A heap-based buffer overflow was reported in procmail's formail utility when parsing addresses with unbalanced quotes CVE-2014-3618...

Updated procmail packages fix CVE-2014-3618

Updated procmail package fixes security vulnerability: A heap-based buffer overflow was reported in procmail's formail utility when parsing addresses with unbalanced quotes CVE-2014-3618...

SOL15564 - TLS vulnerability CVE-2014-3511

1 If you are planning to upgrade to BIG-IP APM 11.5.1 HF6 to mitigate this issue, you should instead upgrade to 11.5.1 HF7 to avoid an issue specific to BIG-IP APM. For more information, refer to SOL15914: The tmm process may restart and produce a core file after BIG-IP APM systems are upgraded...

[SECURITY] [DLA-46-1] procmail update

Debian Security Advisory DLA-0023-1 https://wiki.debian.org/LTS Package : procmail Version : 3.22-19+deb6u1 CVE ID : CVE-2014-3618 Debian Bug : 704675 760443 Boris pi Piwinger and Tavis Ormandy reported a heap overflow vulnerability in procmails formail utility when processing specially-crafted...

DSA-3019-1 procmail - security update

Bulletin has no description...

HP System Management Homepage Login Utility

This module attempts to login to HP System Management Homepage using host operating system authentication. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/smh' require...

file utility memory corruption

Memory corruption CDF format parsing...

SOL15532 - XSS vulnerability in echo.jsp CVE-2014-4023

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

SOL15461 - OpenSSL vulnerability CVE-2011-4619

Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. Note: SGC...

DomainHostingView v1.61 - Show domain hosting information

DomainHostingView is a utility for Windows that collects extensive information about a domain by using a series of DNS and WHOIS queries, and generates HTML report that can be displayed in any Web browser. The information displayed by the report of DomainHostingView includes: the hosting company ...

Vulnerability Fixed in Subnet Solutions SCADA Server

A hole has been fixed in a popular industrial control system data management server that if left unpatched, could result in a remotely exploitable denial of service condition. Subnet Solutions, Inc., a Canadian manufacturer of electric utility products, fixed the vulnerability – along with anothe...

Oracle Solaris Critical Patch Update : apr2013_SRU5

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Utility/pax. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability...

Oracle Solaris Critical Patch Update : apr2014_SRU11_1_17_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to...

Oracle Solaris Critical Patch Update : jan2013_SRU13_4

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Utility/ksh93. The supported version that is affected is 11. Difficult to exploit vulnerability requiring logon to Operating...

Oracle Solaris Critical Patch Update : oct2013_SRU11_1_11_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: IPS repository daemon. The supported version that is affected is 11.1. Difficult to exploit vulnerability allows...

Oracle Solaris Critical Patch Update : apr2013_SRU4a

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Utility. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring...

SOL15404 - OpenSSL vulnerability CVE-2009-3245

Recommended action You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the previous table. If the Versions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade...