[SECURITY] [DSA 1608-1] New mysql-dfsg-5.0 packages fix authorization bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-1608-1 [email protected] http://www.debian.org/security/ Devin Carraway July 13, 2008 http://www.debian.org/security/faq -...

Memory corruption

Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service memory corruption and application crash by resolving an alias that contains crafted AFP volume mount information...

CVE-2008-2308

Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service memory corruption and application crash by resolving an alias that contains crafted AFP volume mount information...

CVE-2008-2308

CVE-2008-2308 affects Apple Mac OS X 10.5.1 and earlier on Intel, via the Alias Manager when resolving an AFP volume mount information. The vulnerability enables local users to gain privileges or cause a denial of service (memory corruption and application crash). Public sources in the connected ...

CVE-2008-2308

Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service memory corruption and application crash by resolving an alias that contains crafted AFP volume mount information...

Ruby vulnerability caused by a problem with the alias funtion so that safe level 4 does not function as a sandbox

Overview Safe levels exist as a part of the Ruby language security model, in order to limit the operation of untrusted objects. Ruby contains a vulnerability which may allow an attacker to bypass the safe level restrictions and execute normally inaccessible methods, due to a problem in Ruby's ali...

[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1557-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 24, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1505-1] New alsa-driver packages fix kernel memory leak

------------------------------------------------------------------------ Debian Security Advisory DSA-1505 [email protected] http://www.debian.org/security/ dann frazier February 22, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1498-1] New libimager-perl packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1498-1 [email protected] http://www.debian.org/security/ Steve Kemp February 19, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1475-1] new gforge packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1475-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 26, 2008 http://www.debian.org/security/faq -...

Fedora 7 : phpMyAdmin-2.11.3-1.fc7 (2007-4298)

Upstream released 2.11.3 - Removed the RPM scriptlets doing httpd restarts 227025 - Patched an information disclosure known as CVE-2007-0095 221694 - Provide virtual phpmyadmin package and a httpd alias 231431 Note that Tenable Network Security has extracted the preceding description block...

[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1422 [email protected] http://www.debian.org/security/ Steve Kemp December 07, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1419-1] New OpenOffice.org packages fix arbitrary Java code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1419-1 [email protected] http://www.debian.org/security/ Martin Schulze December 5th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 11th, 2007 http://www.debian.org/security/faq -...

CVE-2007-5424

The disablefunctions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using inialter when iniset is disabled...

[SECURITY] [DSA 1381-1] New Linux 2.6.18 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1381-1 [email protected] http://www.debian.org/security/ Dann Frazier October 2nd, 2007 http://www.debian.org/security/faq -...

PHP-alias vulnerable: disable_functions bypass

PHP-alias vulnerable: disablefunctions bypass ================================== Источник: PHP-alias vulnerable: disablefunctions bypass Автор: ElektAntichat.ru Обнаружено: 12.09.2007 Тип: локальная Описание: При запрете основной функции/её псевдонима в disablefunctions eё псевдоним/основная...

[SECURITY] [DSA 1372-1] New xorg-server packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1372-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 9th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1342-1] New xfs packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1342-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 30th, 2007 http://www.debian.org/security/faq -...

Security on AIR: Local file access through JavaScript

Hi! It's just a very first look to AIR Adobes Integrated Runtime and its possibilities to process HTML/JS. AIR is beta by now, so Adobe may change things in the final release. What is AIR? Quote from Adobe: "Adobe Integrated Runtime AIR is a cross- operating system runtime that allows you to...