RedHat Security Advisory RHSA-2009:0334

The remote host is missing updates announced in advisory RHSA-2009:0334. The flash-plugin package contains a Firefox-compatible Adobe Flash Player Web browser plug-in. Multiple input validation flaws were found in the way Flash Player displayed certain SWF Shockwave Flash content. An attacker cou...

PHP vulnerable to cross-site scripting

Overview PHP contains a cross-site scripting vulnerability. PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Tomoki Sanaki of International Network Security, Inc. report...

PT-2008-6516 · Mvnforum · Mvnforum

Name of the Vulnerable Software and Affected Versions: mvnForum versions prior to 1.2.1 GA Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters in the listonlineusers component. Recommendations: For...

PT-2008-1081

Name of the Vulnerable Software and Affected Versions net-snmp versions 5.1.2 through 5.3.1 net-snmp-devel versions 5.1.2 through 5.3.1 net-snmp-libs versions 5.1.2 through 5.3.1 net-snmp-utils versions 5.1.2 through 5.3.1 Description The issue is related to an integer overflow in the netsnmp...

Gentoo Security Advisory GLSA 200406-22 (Pavuk)

The remote host is missing updates announced in advisory GLSA 200406-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200807-08 (bind)

The remote host is missing updates announced in advisory GLSA 200807-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-32 (getmail)

The remote host is missing updates announced in advisory GLSA 200409-32. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200603-02 (tetex)

The remote host is missing updates announced in advisory GLSA 200603-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200707-10 (festival)

The remote host is missing updates announced in advisory GLSA 200707-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-36 (phpmyadmin)

The remote host is missing updates announced in advisory GLSA 200411-36. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200407-01 (esearch)

The remote host is missing updates announced in advisory GLSA 200407-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200606-03 (dia)

The remote host is missing updates announced in advisory GLSA 200606-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200608-13 (clamav)

The remote host is missing updates announced in advisory GLSA 200608-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell iPrint Client 'IppCreateServerRef()'远程缓冲区溢出漏洞

BUGTRAQ ID: 30986 CVE ID：CVE-2008-2436 CNCVE ID：CNCVE-20083536 Novell iPrint Client打印解决方案允许用户向网络打印机发送文档。 Novell iPrint Client包含的nipplib.dll存在边界错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于nipplib.dll的"IppCreateServerRef"函数中，传递超长特殊构建的字符串作为"GetPrinterURLList", "GetPrinterURLList2",...

openSUSE 10 Security Update : opera (opera-5537)

This is a version upgrade for opera to version 9.52 to fix possible security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5537. The text description of this plugin is...

FreeType: User-assisted execution of arbitrary code

Background FreeType is a font rendering library for TrueType Font TTF and Printer Font Binary PFB. Description Regenrecht reported multiple vulnerabilities in FreeType via iDefense: An integer overflow when parsing values in the Private dictionary table in a PFB file, leading to a heap-based buff...

SWORD: Shell command injection

Background SWORD is a library for Bible study software. Description Dan Dennison reported that the diatheke.pl script used in SWORD does not properly sanitize shell meta-characters in the "range" parameter before processing it. Impact A remote attacker could provide specially crafted input to a...

Move Media Player qsp2ie07074039.dll ActiveX控件栈溢出漏洞

BUGTRAQ ID: 27995 Move Media Player是一款网络流媒体播放器。 Move Media Player的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 Move Media Player所安装的Quantum Streaming IE Player ActiveX控件（qsp2ie07074039.dll）没有正确地验证对UploadLogs方式的输入参数。如果用户受骗访问了恶意网页并向该方式传送了超长URL参数的话，就可能触发栈溢出，导致执行任意指令。 Move Networks qsp2ie07074039.dll...

Pulseaudio: Privilege escalation

Background Pulseaudio is a networked sound server with an advanced plugin system. Description Marcus Meissner from SUSE reported that the padroproot function does not properly check the return value of the system calls setuid, seteuid, setresuid and setreuid when dropping its privileges. Impact A...

Fedora 8 : perl-Tk-804.028-3.fc8 (2008-1323)

Tue Feb 5 2008 Andreas Bierfert - 804.028-3 - fix 431529 gif overflow in tk see also 431518 - Fri Jan 4 2008 Andreas Bierfert - 804.028-2 - add relevant parts of debian patch - add patch for 235666 - Wed Jan 2 2008 Andreas Bierfert - 804.028-1 - version upgrade - fix 210718 SIGSEGV on exit from...