369 matches found
Fedora 9 : filezilla-3.1.0.1-1.fc9 (2008-6865)
According to the NEWS in this release: ---------------- ! Do not report success on SSL/TLS transfers if server did not perform orderly SSL/TLS shutdown. Previously, an attacker could cause truncated files with FileZilla thinking the transfer was successful. All versions prior to this were affecte...
Oracle RDBMS TNS Data packet DoS
NGSSoftware Insight Security Research Advisory Name: Oracle RDBMS Data packet DoS Systems Affected: Oracle 8.1.7.4, 10g Release 2 and 1, Oracle 9 Severity: High Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Reported: 23rd June 2006 Date of Public Advisory: 17t...
IBM DB2 < 9 Fix Pack 2 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 running on the remote host allows unsafe access to several setuid-root binaries. A local attacker can exploit this to crash the affected database server or possibly even gain root-level access. In addition, the fenced userid may be able to...
iDefense Security Advisory 10.17.06: Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability
Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability iDefense Security Advisory 10.17.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 17, 2006 I. BACKGROUND Opera is a cross-platform web browser. More information is available from http://www.opera.com/ II...
Arbitrary file overwrite possible by Musicmatch ActiveX control
Hyperdose Security Advisory Name: Arbitrary file overwrite in Musicmatch Systems Affected: Musicmatch v10.00.2047 or earlier according to Yahoo v9.00.5059 and earlier are also affected Severity: Important Author: Robert Fly - [email protected] Advisory URL:...
Microsoft Media Player Version 9 PNG Multiple Vulnerabilities (deprecated)
Binary data 2602.prm...
ISC BIND 9 fails to process additional data chains in responses correctly thereby causing the server to fail an internal consistency check
Overview A denial-of-service vulnerability exists in version 9 of the Internet Software Consortium's ISC Berkeley Internet Name Domain BIND server. ISC BIND versions 8 and 4 are not affected. Exploiting this vulnerability will cause vulnerable BIND servers to shut down. Description BIND is an...
Progress TERM (protermcap) overflows and PROMSGS overflows
A malformed termcaps and promsgs can overwrite memory on progress versions 8 and 9 These are two seperate issues but the below examples show they can be used simultaneously in some cases. These have been patched to my knowledge however I do not know the patch numbers. Put a few thousand chars on...
ISS Advisory: BIND Inadvertent Local Exposure of HMAC-MD5 (TSIG) Keys
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...