CVE-2009-1713

The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read 1 arbitrary local files and 2 files from different security zones via unspecified vectors...

Debian: Security Advisory (DSA-1779-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1779-1 : apt - several vulnerabilities

Two vulnerabilities have been discovered in APT, the well-known dpkg frontend. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1300 In time zones where daylight savings time occurs at midnight, the apt cron.daily script fails, stopping new security...

Command injection

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight...

CVE-2009-1300

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight...

DNS Server DNSSEC Aware Resolver

The remote DNS resolver accepts DNSSEC options. This means that it may verify the authenticity of DNSSEC protected zones if it is configured to trust their keys. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35373; scriptversion"$Revision: 1.14 $";...

CVE-2008-3875

The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls...

Sun Solaris内核隐蔽通道建立安全绕过漏洞

BUGTRAQ ID:30880 CNCAN ID：CNCAN-2008082908 Sun Solaris是一款开放源代码的操作系统。 Solaris内核存在安全绕过问题，允许两个处理程序建立一个隐蔽通信通道。 此漏洞允许两个非特权本地用户处理程序建立一个隐蔽通信通道来绕过系统限制，如Solaris可信扩展中的多层安全策略或使用zones5或chroot2实现的冲突策略。 Sun Solaris 9x86 Sun Solaris 9sparc Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solar...

CVE-2008-3838

Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...

CVE-2008-3838

Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...

Integer overflow

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...

Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX stack buffer overflows

Overview The Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control contains multiple stack buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Online Media Technologies, which was formerly known as NCT...

Vulnerability involving security zone handling in applications using Internet Explorer components

Overview Internet Explorer IE components apply different security levels for web content processing depending on the location zone of the web content. As a result, web content on the Internet is processed in the "Internet" zone with a higher security level than that set for web content in the...

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-4909)

This update fixes multiple bugs in php by upgrading it to version 5.2.5. - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars CVE-2007-5898 - overly long arguments to the dl function could crash php CVE-2007-4825 - overy long arguments to the glob function could crash php...

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-4810)

This update fixes multiple bugs in php : - use system pcre library to fix several pcre vulnerabilities CVE-2007-1659, CVE-2006-7230, CVE-2007-1660, CVE-2006-7227 CVE-2005-4872, CVE-2006-7228 - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars CVE-2007-5898 - overly long...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 4808)

This update fixes multiple bugs in php : - use system pcre library to fix several pcre vulnerabilities. CVE-2007-1659 / CVE-2006-7230 / CVE-2007-1660 / CVE-2006-7227 / CVE-2005-4872 / CVE-2006-7228 - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars. CVE-2007-5898 - overly...

Sun Solaris LX(5) Branded Zones本地拒绝服务漏洞

BUGTRAQ ID: 26672 CNCAN ID:CNCAN-2007120303 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的Linx branded zone see lx5存在竞争条件错误，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节供。此问题仅存在于运行在64-bit系统上的Sun Solaris 10。 Sun Solaris 10x86 厂商解决方案 可采用Solaris 10 patch 127112-04：...

GLSA-200711-20 : Pioneers: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200711-20 Pioneers: Multiple Denials of Service Roland Clobus discovered that the Pioneers server may free sessions objects while they are still in use, resulting in access to invalid memory zones CVE-2007-5933. Bas Wijnen...

Format string

Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 password fields when accessing certain "restricted zones", which are not properly handled by the a...

CVE-2007-5265

Multiple format string vulnerabilities in websrv.cpp in Dawn of Time 1.69s beta4 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 password fields when accessing certain "restricted zones", which are not properly handled by the a...