RHEL 6 : libtasn1 (RHSA-2012:0427)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0427 advisory. libtasn1 is a library developed for ASN.1 Abstract Syntax Notation One structures management that includes DER Distinguished Encoding Rules encoding...

PT-2012-2538 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts versions prior to 2.3.1.1 Description: The issue allows remote attackers to execute arbitrary commands via unspecified vectors when the DebuggingInterceptor component is used in developer mode. The vendor characterizes this...

RHEL 6 : ipmitool (RHSA-2011:1814)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:1814 advisory. The ipmitool package contains a command line utility for interfacing with devices that support the Intelligent Platform Management Interface IPMI...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.1 update

Updated JBoss Enterprise Application Platform 5.1.1 packages that fix one security issue and various bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

Low: Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.0 security and bug fix update

Updated JBoss Enterprise Application Platform 5.1 packages that fix one security issue and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...

PT-2010-1165

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 8.x through 8.2.1 Adobe Reader and Acrobat versions 9.x through 9.3.1 Description The issue is related to an unspecified vulnerability in Adobe Reader and Acrobat, allowing attackers to cause a denial of servi...

CentOS Update for kernel CESA-2008:0167 centos4 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0167 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

PT-2008-1556 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.2.x before 2.2.7-dev Description: The issue is related to an unspecified vulnerability in mod proxy balancer for Apache HTTP Server when running on Windows. It allows remote attackers to trigger memory corruption...

PT-2007-3801 · Phpmychat · Phpmychat

Name of the Vulnerable Software and Affected Versions: phpMyChat version 0.14.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter in the phpMyChat.php3 file. However, it has been disputed by multiple third parties because the $ChatPat...

PT-2006-2922 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.x through 0.10.14 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash due to a null dereference. This can be achieved via the Sniffer capture or the SMB PIPE dissector...

Golden FTP Server Pro 2.52 - Remote Buffer Overflow (2)

/ Golden FTP Server Pro remote stack BOF exploit author : c0d3r "kaveh razavi" [email protected] [email protected] risk : highly critical vender status : no patch released , all targets are vuln package : golden-ftp-server-pro 2.5.0.0 and prior advisory : http://secunia.com/advisories/15156/...

RHEL 3 / 4 : gaim (RHSA-2005:215)

An updated gaim package that fixes various security issues as well as a number of bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Two HTML parsing bugs...

TYPO3 'cmw_linklist Extension' 'category_uid' Parameter SQL Injection

The installation of TYPO3 on the remote host is vulnerable to remote SQL injection attacks through the parameter 'categoryuid' used by the third-party cmwlinklist extension. By exploiting this flaw, a remote attacker can uncover sensitive information or even modify existing data. %NASLMINLEVEL...

Critical: Red Hat Security Advisory: HelixPlayer security update

An updated HelixPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A stack based buffer overflow bug was found in HelixPlayer's Synchronized...

Low: Red Hat Security Advisory: vim security update

Updated vim packages that fix a security vulnerability are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. VIM Vi IMproved is an updated and improved version of the vi screen-based editor. The Debian Security Audit Project discovered ...

Low: Red Hat Security Advisory: imap security update

Updated imap packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having low security impact by the Red Hat Security Response Team. The imap package provides server daemons for both the IMAP Internet Message Access Protocol and POP...

RHEL 2.1 / 3 : vim (RHSA-2005:122)

Updated vim packages that fix a security vulnerability are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. VIM Vi IMproved is an updated and improved version of the vi screen-based editor. The Debian Security Audit Project discovered ...

Important: Red Hat Security Advisory: libtiff security update

Updated libtiff packages that fix various integer overflows are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team The libtiff package contains a library of functions for manipulating TIFF Tagged Image...

Important: Red Hat Security Advisory: xemacs security update

Updated XEmacs packages that fix a string format issue are now available. XEmacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movemail utility of XEmacs. If a user connects to a malicious POP server, an...

RHEL 2.1 / 3 : emacs (RHSA-2005:112)

Updated Emacs packages that fix a string format issue are now available. Emacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. If a user connects to a malicious POP server, an...