[SECURITY] Fedora 11 Update: cpio-2.9.90-8.fc11

GNU cpio copies files into or out of a cpio or tar archive. Archives are files which contain a collection of other files plus information about them, such as their file name, owner, timestamps, and access permissions. The archive can be another file on the disk, a magnetic tape, or a pipe. GNU cp...

[SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2019-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 20, 2010 http://www.debian.org/security/faq -...

[SECURITY] Fedora 12 Update: cpio-2.10-5.fc12

GNU cpio copies files into or out of a cpio or tar archive. Archives are files which contain a collection of other files plus information about them, such as their file name, owner, timestamps, and access permissions. The archive can be another file on the disk, a magnetic tape, or a pipe. GNU cp...

[SECURITY] Fedora 12 Update: tar-1.22-12.fc12

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

DEBIAN-CVE-2010-0396

Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive...

DEBIAN-CVE-2009-2624

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

OpenJDK Pack200 Buffer overflow vulnerability (6792554)

Integer overflow in unpack200 in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers...

[USN-863-1] QEMU vulnerability

=========================================================== Ubuntu Security Notice USN-863-1 December 03, 2009 qemu-kvm vulnerability https://launchpad.net/bugs/458521 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10...

[SECURITY] [DSA-1940-1] New php5 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1940-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 25, 2009 http://www.debian.org/security/faq -...

Kingsoft Internet Security 9 Denial of Services

No description provided by source. Application: Kingsoft Internet Security 9 Platforms: Windows Vista SP2 Windows XP SP3 Exploitation: Denial of Services Discover Date: 2009-11-05 Author: Francis Provencher Protek Research Lab's BLog: httP://Protekresearch.blogspot.com 1 Introduction 2 Report...

CA Anti-Virus multiple security vulnerabilities

Multiple vulnerabilities on RAR archives parsing...

PT-2009-5869 · Ca · Ca Anti-Virus For The Enterprise +3

Name of the Vulnerable Software and Affected Versions: CA Anti-Virus for the Enterprise versions 7.1 through r8.1 CA Anti-Virus 2007 through 2009 CA eTrust EZ Antivirus version r7.1 CA Internet Security Suite 2007 through Plus 2009 Description: The issue is related to a crafted RAR archive file...

openSUSE 10 Security Update : clamav (clamav-6309)

Multiple issues in clamav regarding malformed archives and emails have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-6309. The text description of this plugin is C SUSE LL...

Multiple Security Products LHA File Handling Buffer Overflow (CVE-2005-0643)

Several anti-virus products ,both for Enterprise and Desktop consumer use, are capable of detecting malicious content not only within regular files but also within compressed archives such as LHA archives. There exists a vulnerability in the way several anti-virus libraries parse LHA compressed...

SuSE9 Security Update : perl-Archive-Zip (YOU Patch Number 9462)

Mail virus scanners like amavis use perl-Archive-Zip to scan ZIP archives. A bug in the handling of files with manipulated size entires has been fixed that could leave malicious code in such files undetected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin...

SuSE 11 Security Update : ClamAV (SAT Patch Number 1009)

Multiple issues in clamav regarding malformed archives and emails have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE9 Security Update : ClamAV (YOU Patch Number 12442)

Multiple issues in clamav regarding malformed archives and emails have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41307; scriptversion"1.7";...

Mambo 4.6.3 arbitrary file upload

Step 1 Using post method send file to: http://victim.com/mambo4.6.5/mambots/editors/mostlyce/jscripts/tinymce/filemanager/connectors/php/connector.php?Command=FileUpload file should have one of the following extensions: zip, doc, xls, pdf, rtf, csv, jpg, gif, jpeg, png, avi, mpg, mpeg, swf, fla...

GLSA-200909-04 : Clam AntiVirus: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200909-04 Clam AntiVirus: Multiple vulnerabilities Multiple vulnerabilities have been found in ClamAV: The vendor reported a Divide-by-zero error in the PE 'Portable Executable'; Windows .exe file handling of ClamAV CVE-2008-6680...

Ubuntu USN-814-1 (openjdk-6)

The remote host is missing an update to openjdk-6 announced via advisory USN-814-1. OpenVAS Vulnerability Test $Id: ubuntu8141.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8141.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-814-1 openjdk-6 Authors: Thoma...