EUVD-2006-6119

Malware in sbrugna...

SUSE-RU-2016:0496-1 Recommended update for certification-sles-eal4

The EAL4 Configuration Guide has been updated to version 1.14, covering the recently released glibc patches to fix CVE-2015-7547...

CVE-2008-0884

The Replace function in the capp-lspp-config script in the 1 lspp-eal4-config-ibm and 2 capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux RHEL 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a change to world-writable...

CVE-2008-0884

The Replace function in the capp-lspp-config script in the 1 lspp-eal4-config-ibm and 2 capp-lspp-eal4-config-hp packages before 0.65-2 in Red Hat Enterprise Linux RHEL 5 uses lstat instead of stat to determine the /etc/pam.d/system-auth file permissions, leading to a change to world-writable...

CVE-2008-0884

CVE-2008-0884 affects capp-lspp-config scripts in lspp-eal4-config-ibm and capp-lspp-eal4-config-hp (versions before 0.65-2) on Red Hat Enterprise Linux 5. The Replace function uses lstat instead of stat to check /etc/pam.d/system-auth permissions, causing /etc/pam.d/system-auth-ac to become worl...

Important: Red Hat Security Advisory: lspp-eal4-config-ibm and capp-lspp-eal4-config-hp security update

Updated lspp-eal4-config-ibm and capp-lspp-eal4-config-hp packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The lspp-eal4-config-ibm and capp-lspp-eal4-config-h...

CheckPoint Secure Platform Multiple Buffer Overflows

Hi all, we have published a paper about CheckPoint Firewall-1 vulnerabilities. The platform tested is the Secure Platform R60. We have found many buffer overflows. Most of them are located in command line utilities that can be exploited locally. A very few of them maybe can be exploited remotely,...

CVE-2006-6136

IBM WebSphere Application Server 6.1.0 before Fix Pack 3 6.1.0.3 does not perform EAL4 authentication checks at the proper time during "registering of response operation," which has unknown impact and attack vectors...

CVE-2006-6136

IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) is affected by a vulnerability where EAL4 authentication checks are not performed at the proper time during the “registering of response operation.” The incident is described as having unknown impact and attack vectors in the CVE ...