Critical: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients...

Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029)

Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 949029 Published: March 11, 2008 Version: 1.0 General Information Executive Summary This security update resolves several privately reported and publicly reported vulnerabilities i...

Input validation

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."...

Security Update for the 2007 Microsoft Office System (KB947801)

A security vulnerability exists in the Compatibility Pack for the 2007 Office System that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...

Symantec the presence of a remote execution vulnerability 0day-vulnerability warning-the black bar safety net

EXP code: !-- Symantec BackupExec Calendar ControlPVCalendar. ocx BoF Exploit Vulnerability discovered by JJ Reyes of Secunia Research http://secunia.com/advisor... written by e. b. Tested on Windows XP SP2fully patched English, IE6 and IE7, PVCalendar. ocx version 10.0.0.17 Thanks to h. d. m. an...

Symantec the presence of a remote execution vulnerability 0day-vulnerability warning-the black bar safety net

milw0rm to this morning published a Symantec remote execution vulnerability EXP DEMO code, a hacker can simply modify the Code of the SHELLCODE, and then after ALPHA2 coding can be constructed in a download virus web Trojan. It has yet to intercept to exploit the vulnerability of the net horse...

Debian Security Advisory DSA 1503-1 (kernel-source-2.4.27 (2.4.27-10sarge6))

The remote host is missing an update to kernel-source-2.4.27 2.4.27-10sarge6 announced via advisory DSA 1503-1. OpenVAS Vulnerability Test $Id: deb15031.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1503-1 kernel-source-2.4.27 2.4.27-10sarge6 Authors:...

Debian Security Advisory DSA 1504-1 (kernel-source-2.6.8 (2.6.8-17sarge1))

The remote host is missing an update to kernel-source-2.6.8 2.6.8-17sarge1 announced via advisory DSA 1504-1. OpenVAS Vulnerability Test $Id: deb15041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1504-1 kernel-source-2.6.8 2.6.8-17sarge1 Authors: Thomas...

Fedora 8 : kernel-2.6.23.15-137.fc8 (2008-1423)

Update to Linux kernel 2.6.23.15: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.15 Fix vmsplice local root vulnerability: CVE-2008-0009: Fixed by update to 2.6.23.15. CVE-2008-0010: Fixed by update to 2.6.23.15. CVE-2008-0600: Extra fix from upstream applied. Fix memory leak in...

Moderate: wireshark security update

wireshark-0.99.7-EL3.1.0.1: 0.99.7-1.EL3.1.0.1 - add oracle-ocfs2-network.patch 0.99.7-1 - upgrade to 0.99.7 - switch to libsmi from net-snmp - disable ADNS due to its lack of Ipv6 support - Resolves: 397431 0.99.6-1 - upgrade to 0.99.6 - Wireshark could crash when dissecting an HTTP chunked...

Debian Security Advisory DSA 1103-1 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1103-1. OpenVAS Vulnerability Test $Id: deb11031.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1103-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1017-1 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1017-1. OpenVAS Vulnerability Test $Id: deb10171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1017-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1399-1 (pcre3)

The remote host is missing an update to pcre3 announced via advisory DSA 1399-1. OpenVAS Vulnerability Test $Id: deb13991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1399-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Samba lsa_io_trans_names buffer overflow

Added: 12/24/2007 CVE: CVE-2007-2446 BID: 24195 OSVDB: 34699 Background Samba is a software package which implements the SMB protocol on a variety of platforms, providing compatibility with Windows systems. Problem A vulnerability in the LSA RPC interface allows a remote attacker to execute...

runcms-lfi.txt

WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior versions also may be affected Exploitatio...

compat, openldap security update

CentOS Errata and Security Advisory CESA-2007:1038 Updated openldap packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP...

Ubuntu 6.10 : linux-source-2.6.17 vulnerabilities (USN-486-1)

The compatsysmount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode. CVE-2006-7203 The Omnikey CardMan 4040 driver cm4040cs did not limit the size of buffers passed to read and write. A local attacker could exploit this to execute...

DSA-1399-1 pcre3 - arbitrary code execution

Bulletin has no description...

CVE-2007-5653

The Component Object Model COM functions in PHP 5.x on Windows do not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control...

Design/Logic Flaw

The Component Object Model COM functions in PHP 5.x on Windows do not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control...