MDKA-2007:062 : rpmdrake

The rpmdrake package, which provides the graphical software installation and update tools rpmdrake, drakrpm-edit-media and MandrivaUpdate, included with Mandriva Linux 2007 Spring contains several bugs. These include: When installing software with rpmdrake, if packages are selected for installati...

Fedora 10 : wordpress-mu-2.6.5-1.fc10 (2008-11104)

Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network Security has extracted the preceding description block directly from...

MDVA-2008:154 : util-linux-ng

Several bugs were found in util-linux-ng package: - Using an offset on loopback device was broken - Creating an encrypted loopback with losetup -e was broken - Using fdisk to modify the partition table of an image file did not write the changes The updated package fixes these issues. %NASLMINLEVE...

FreeBSD : Buffer overflows and format string bugs in Emil (ce46b93a-80f2-11d8-9645-0020ed76ef5a)

Ulf Harnhammar reports multiple buffer overflows in Emil, some of which are triggered during the parsing of attachment filenames. In addition, some format string bugs are present in the error reporting code. Depending upon local configuration, these vulnerabilities may be exploited using speciall...

MDVA-2008:188 : kdewebdev4

The kdewebdev4 package shipped in Mandriva Linux 2009.0 contained several packaging bugs. One is that kfilereplace and kxsldbg had file conflicts on icons, and the other was that no meta package called 'kdewebdev4' was provided. The latter issue would cause kdewebdev4-devel to be installed when...

MDVA-2008:093 : kdesdk

kdesdk packages in Mandriva Linux 2008 and 2008 Spring had packaging bugs which led to the subversion ioslave to not build and thus not be provided. The updated packages fixed the bugs and provide the subversion access ioslave. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as t...

CentOS 4 / 5 : thunderbird (CESA-2007:0401)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws wer...

CentOS 4 : firefox (CESA-2006:0733)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:229)

An off-by-one error was found in ClamAV versions prior to 0.94.1 that could allow remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted VBA project file CVE-2008-5050. Other bugs have also been corrected in 0.94.1 which is being provided with this update...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-6194)

The Mozilla Firefox Browser was refreshed to the current MOZILLA18 branch state around fix level 2.0.0.22. Security issues identified as being fixed are: MFSA 2009-01 / CVE-2009-0352 / CVE-2009-0353: Mozilla developers identified and fixed several stability bugs in the browser engine used in...

SuSE Security Advisory SUSE-SA:2009:023 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:023. OpenVAS Vulnerability Test $Id: susesa2009023.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:023 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

SuSE Security Advisory SUSE-SA:2009:023 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:023. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

[SECURITY] [DSA 1770-1] New imp4 packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1770-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 13, 2009 http://www.debian.org/security/faq -...

PHP-agenda <= 2.2.5 Remote File Overwriting

Salvatore "drosophila" Fresta + Application: PHP-agenda + Version: = 2.2.5 + Website: http://php-agenda.sourceforge.net + Bugs: A Remote File Overwriting + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact:...

Dynamic Flash Forum 1.0 Beta SQL Injection

Salvatore "drosophila" Fresta + Application: Dynamic Flash Forum + Version: 1.0 Beta + Website: http://df2.sourceforge.net/ + Bugs: A Information Disclosure B Authentication Bypass C Multiple SQL Injection + Exploitation: Remote + Date: 09 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta +...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

Mandriva Update for kdewebdev4 MDVA-2008:188 (kdewebdev4)

Check for the Version of kdewebdev4 OpenVAS Vulnerability Test Mandriva Update for kdewebdev4 MDVA-2008:188 kdewebdev4 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Mandriva Update for kdesdk MDVA-2008:093-1 (kdesdk)

Check for the Version of kdesdk OpenVAS Vulnerability Test Mandriva Update for kdesdk MDVA-2008:093-1 kdesdk Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for mysql MDVA-2008:018 (mysql)

Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVA-2008:018 mysql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for gtk+2.0 MDKSA-2007:039 (gtk+2.0)

Check for the Version of gtk+2.0 OpenVAS Vulnerability Test Mandriva Update for gtk+2.0 MDKSA-2007:039 gtk+2.0 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...