Design/Logic Flaw

Unspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote authenticated users to cause a denial of service CPU or memory consumption via unspecified vectors related to the Devel::StackTrace module for Perl...

CVE-2008-3502

Unspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote authenticated users to cause a denial of service CPU or memory consumption via unspecified vectors related to the Devel::StackTrace module for Perl...

Security fix for the ALT Linux 5 package openldap2.4 version 2.3.41-alt2

July 2, 2008 Dmitry Lebkov 2.3.41-alt2 - fix for CVE-2008-2952 patch from OpenLDAP CVS - set more specific BuildRequires: + libdb4.4-devel...

openSUSE 10 Security Update : xine-devel (xine-devel-5204)

Specially crafted NSF files could potentially be exploited to execute arbitrary code CVE-2008-1878. Specially crafted files or streams could potentially be abused to trick applications that support speex into executing arbitrary code CVE-2008-1686. %NASLMINLEVEL 70300 C Tenable Network Security,...

libvorbis security update

CentOS Errata and Security Advisory CESA-2008:0271-01 Updated libvorbis packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contai...

Fedora 8 : nagios-2.11-3.fc8 (2008-3098)

Tue Mar 18 2008 Tom 'spot' Callaway 2.11-3 - add Requires for versioned perl libperl.so - get rid of pointless file Requires - Mon Mar 17 2008 Mike McGrath 2.11-2 - Upstream released new version - Added perl-ExtUtils-Embed - Tue Feb 12 2008 Mike McGrath 2.10-6 - Rebuild for gcc43 - Thu Nov 29...

openSUSE 10 Security Update : xine-devel (xine-devel-5137)

Specially crafted files could cause integer overflows in the xine library. Attackers could potentially exploit that to execute arbitrary code with the privileges of the user who opened such a file CVE-2008-1482. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE 10 Security Update : xine-devel (xine-devel-5113)

This update fixes a bug in the function sdpplinparse that allowed remote attackers to access process memory out-of a buffers bound. This vulnerability can be used to execute arbitrary code remotely if successfully exploited. CVE-2008-0073 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

krb5 security update

CentOS Errata and Security Advisory CESA-2008:0180 Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication...

openSUSE 10 Security Update : xine-devel (xine-devel-5078)

This update of xine fixes a possible buffer overflow that can be triggered via FLAC tags to execute arbitrary code CVE-2008-0486 and a possible buffer overflow in the matroska demuxer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : libcdio (libcdio-5061)

Long file names in ISO file systems with Joliet extension could cause a buffer overflow in libcdio CVE-2007-6613. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libcdio-5061. The text...

dbus security update

CentOS Errata and Security Advisory CESA-2008:0159 Updated dbus packages that fix an issue with circumventing the security policy are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-Bus is a system for sending messages between...

openSUSE 10 Security Update : pcre (pcre-4980)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-4873)

This update fixes several security vulnerabilities note: not all versions are affected by every bug : - CVE-2007-2583 - CVE-2007-2691 - CVE-2007-2692 - CVE-2007-5925 - CVE-2007-5969 - CVE-2007-6303 - CVE-2007-6304 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

openSUSE 10 Security Update : python (python-4900)

Specially crafted images could trigger an integer overflow in the imageop module CVE-2007-4965. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update python-4900. The text description of this plugin...

openSUSE 10 Security Update : xine-devel (xine-devel-4916)

Specially crafted rtsp-Streams could cause a buffer overflow in xine. Attackers could potentially exploit that to execute arbitrary code CVE-2008-0225. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE 10 Security Update : xine-devel (xine-devel-4917)

Specially crafted rtsp-Streams could cause a buffer overflow in xine. Attackers could potentially exploit that to execute arbitrary code CVE-2008-0225. Additionally a security update of xorg-x11 revealed a bug in xine-ui. The xine user interface didn't display properly due to that. %NASLMINLEVEL...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2008:0008 Updated Apache httpd packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a...

CVE-2008-0276

Cross-site scripting XSS vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table...

Cross site scripting

Cross-site scripting XSS vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table...