Important: Red Hat Security Advisory: freetype security update

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

MDVA-2009:260 : gnome-desktop

In Mandriva 2010.0, when using an old X server without support for the XrandR extension, the Gnome settings daemon would crash. This update resolves the issue by adding a check before using the extension. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is...

X Server Detection

Binary data 5528.prm...

CVE-2010-1166

CVE-2010-1166 details (connected documents): The fault lies in the X.Org X11 server Render extension’s fbComposite implementation (fbpict.c), where an incorrect macro definition can lead to memory corruption, enabling denial of service or possibly remote code execution for remote-authenticated us...

Apple Mac OS X Wiki Server Weblog SACL Security Bypass

The remote Mac OS X Server Web Services installation contains a version of the Wiki Server component that is affected by a security bypass vulnerability due to a failure to check the service access control lists SACLs during the creation of a user's weblog. An authenticated, remote attacker can...

Mac OS X Server Web Services Version Detection

The remote host is running Mac OS X Server Web Services, a set of services for handling remote web services such as a wiki and a calendar. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45439; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Ma...

CVE-2010-0524

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

CVE-2010-0522

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing...

Stack overflow

Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

Directory traversal

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

Code injection

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing...

Design/Logic Flaw

Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

Design/Logic Flaw

iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type...

CVE-2010-0501

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

CVE-2010-0504

Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-0503

Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

Default configuration

The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message...

CVE-2010-0524

CVE-2010-0524 affects the FreeRADIUS server in Apple Mac OS X Server prior to 10.6.3. The default configuration permits EAP-TLS authenticated connections based on an arbitrary client certificate, enabling a remote attacker to obtain network connectivity via a crafted RADIUS Access Request. Remedi...

CVE-2010-0504

CVE-2010-0504 describes multiple stack-based buffer overflows in iChat Server of Mac OS X Server prior to 10.6.3. Exploitation could allow a remote attacker to execute arbitrary code or cause a denial of service via unspecified vectors; the flaws are specific to iChat Server and are addressed by ...

CVE-2010-0502

iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type...