6771 matches found
Sun Solaris 10 RPC dmispd DoS
No description provided by source. / camisado.c AKA Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.24.2009 Another long night in ONC RPC fuzzing land... uname -a SunOS unknown 5.10 Generic139555-08 sun4u...
Taoyuan disk Getshell 洞子-vulnerability warning-the black bar safety net
Source:Prius special Affected version:latest Author:black God Jing the flow of God's love I and the silver God,the static flow of three in the penetration time,met this program examined the following,find this app you can directly Getshell precisely, or the use of the IIS that 洞子 Simple to say us...
kernel security update
CentOS Errata and Security Advisory CESA-2009:1193 Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...
Visionsoft Audit Multiple Vulnerabilities
Visionsoft Audit is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Tim Brown Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:visionsoft:audit";...
Web Application Tests Settings
This script sets options for generic web tests. It does not perform any test by itself. Several scripts use the options set here to test web applications, look for cross-site scripting attacks, SQL injection, etc. in CGIs. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
iPhone 3G S still not enterprise-ready
From Computerworld Matt Hamblen The new iPhone 3G S boasts remote data wipe, hardware-based encryption and tethering of the device to a laptop that would seem to please business users interested in protecting data and enhancing productivity. But no, those steps are not good enough for widespread...
util-linux security and bug fix update
2.12a-24.el4 - fix 458539 - man nfs : wrong information about nfs version used 2.12a-23.el4 - fix 485004 - move mount doesnt correctly update mtab 2.12a-22.el4 - fix 472186 - mount -a has problems with duplicate labels in a mpath setup - fix 471372 - RHEL4: fdisk cannot create partition with...
util security update
CentOS Errata and Security Advisory CESA-2009:0981 An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic...
Mandriva Linux Security Advisory : kernel (MDVSA-2009:118)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an unprivileged child process by launching an additional child process with the CLONEPARE...
RHEL 4 : util-linux (RHSA-2009:0981)
An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities, such as fdisk and mount. A log...
Low: Red Hat Security Advisory: util-linux security and bug fix update
An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities, such as fdisk and mount. A log...
util-linux: audit log injection via login
Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...
RedHat Security Advisory RHSA-2009:0473
The remote host is missing updates to the kernel announced in advisory RHSA-2009:0473. This update fixes the following security issues: a logic error was found in the dosetlk function of the Linux kernel Network File System NFS implementation. If a signal interrupted a lock request, the local POS...
RHEL 5 : kernel (RHSA-2009:0473)
Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
Audit finds 700 high-risk flaws in air traffic systems
From Computerworld Jaikumar Vijayan A government audit has found more than 760 high-risk vulnerabilities in Web applications used to support Air Traffic Control ATC operations around the country. The flaws, which were discovered in 70 Web applications tied to ATC operations, give attackers a way ...
kernel security update
CentOS Errata and Security Advisory CESA-2009:0473 Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...
kernel: x86-64: syscall-audit: 32/64 syscall hole
The auditsyscallentry function in the Linux kernel 2.6.28.7 and earlier on the x8664 platform does not properly handle 1 a 32-bit process making a 64-bit syscall or 2 a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted...
UBUNTU-CVE-2009-1553
Multiple cross-site scripting XSS vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 applications/applications.jsf, 2 configuration/configuration.jsf, 3 customMBeans/customMBeans.jsf, ...
CVE-2009-1553
Multiple cross-site scripting XSS vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 applications/applications.jsf, 2 configuration/configuration.jsf, 3 customMBeans/customMBeans.jsf, ...