kernel: information leak via userspace USB interface

The processcomplcompat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensiti...

[SECURITY] Fedora 13 Update: udisks-1.0.1-4.fc13

udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which...

Fedora Update for dbus-glib FEDORA-2010-12863

Check for the Version of dbus-glib OpenVAS Vulnerability Test Fedora Update for dbus-glib FEDORA-2010-12863 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for dbus-glib FEDORA-2010-12911

Check for the Version of dbus-glib OpenVAS Vulnerability Test Fedora Update for dbus-glib FEDORA-2010-12911 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 12 Update: dbus-glib-0.86-3.fc12

D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop...

[SECURITY] Fedora 13 Update: dbus-glib-0.86-4.fc13

D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop...

kernel: information leak via userspace USB interface

The processcomplcompat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensiti...

CVE-2010-2474

JBoss Enterprise Service Bus ESB before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service...

CVE-2010-2474

JBoss Enterprise Service Bus ESB before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service...

CVE-2010-2474

JBoss Enterprise Service Bus ESB before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service...

MDVA-2009:180 : x11-driver-video-openchrome

The Openchrome driver had an issue where it could cause errors in the PCI bus after returning from DPMS, which could lead to errors in other devices. This new openchrome driver version fixes this problem, so it doesn't interfere with the other PCI devices anymore. %NASLMINLEVEL 70300 @DEPRECATED@...

Fedora 12 : konversation-1.2.3-1.fc12 (2010-1935)

Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...

kernel: information leak via userspace USB interface

The processcomplcompat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate attackers to obtain sensiti...

[SECURITY] Fedora 13 Update: udisks-1.0.1-1.fc13

udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices...

kvm-userspace-rhel5: usb-linux.c: fix buffer overflow

Buffer overflow in the usbhosthandlecontrol function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service guest OS crash or hang or possibly execute arbitrary code on the host OS via a crafted USB packet...

Code injection

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

CVE-2009-4674

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

CVE-2009-4674

The CVE-2009-4674 entry affects Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script. The flaw in admin/admin.php allows remote attackers to change an arbitrary password by modifying a user_id field, indicating an authentication/configuration weakness in the user management func...

Mandriva Update for gnome-screensaver MDVSA-2010:040 (gnome-screensaver)

Check for the Version of gnome-screensaver OpenVAS Vulnerability Test Mandriva Update for gnome-screensaver MDVSA-2010:040 gnome-screensaver Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...