VMware Releases Security Advisory VMSA-2010-0007

VMware has released security advisory VMSA-2010-0007 to address multiple vulnerabilities in VMware hosted products, vCENTER Server and ESX. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, operate with elevated privileges, obtain sensitive information, or cau...

libnss-db unauthorized files access

It's possible to access local files with elevated privileges...

XnView DICOM Parsing Integer Overflow Vulnerability (Windows)

This host has XnView installed and is prone to integer overflow vulnerability. Vulnerabilities Insight: The flaw is due to integer overflow when processing DICOM images with certain dimensions. This can be exploited to cause a heap-based buffer overflow by persuading a victim to open a...

Apple Releases Security Update 2010-002 and Mac OS X v10.6.3

Apple has released Security Update 2010-002 and Mac OS X v10.6.3 to address multiple vulnerabilities that affect a number of applications. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, cause a denial-of-service condition, bypass security...

puppet privilege escalation

Elevated privileges are not dropped on files access, symbolic links vulnerability...

Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability

Bugtraq ID:38764 Microsoft Virtual PC Hypervisor is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass memory protection mechanisms. Successfully exploiting this issue will allow attackers to gain access to sensitive information, overwrite arbitrary data, and gai...

SUPERAntiSpyware 4.34.1000 and SuperAdBlocker 4.6.1000 - Multiple Vulnerabilities

SUPERAntiSpyware 4.34.1000 and SuperAdBlocker 4.6.1000 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/38645/info SUPERAntiSpyware and Super Ad Blocker are prone to multiple local vulnerabilities, including: - Multiple denial-of-service vulnerabilities - Multiple local...

SUPERAntiSpyware 4.34.1000 and SuperAdBlocker 4.6.1000 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/38645/info SUPERAntiSpyware and Super Ad Blocker are prone to multiple local vulnerabilities, including: - Multiple denial-of-service vulnerabilities - Multiple local privilege-escalation vulnerabilities - A security vulnerability that may allow attackers...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6562)

This update brings the Mozilla Firefox 3.5 webbrowser to version 3.5.3, the Mozilla XULRunner 1.9.0 engine to the 1.9.0.14 stable release, and the Mozilla XULRunner 1.9.1 engine to the 1.9.1.3 stable release. It also fixes various security issues : - Mozilla developers and community members...

Debian DSA-1886-1 : iceweasel - several vulnerabilities

Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3079 'mozbugra4' discovered that a programming error in the FeedWriter...

Debian DSA-1830-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0040 The execution of arbitrary code might be possible via a crafted...

Microsoft Windows Client/Server Run-time Subsystem Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability in the Client/Server Run-time Subsystem CSRSS. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits may result in the complete compromise of affected...

Maildrop Privilege Escalation Vulnerability

This host is installed Maildrop and is prone to Privilege Escalation vulnerability OpenVAS Vulnerability Test $Id: gbmaildropprivescvuln.nasl 4919 2017-01-02 15:22:45Z cfi $ Maildrop Privilege Escalation Vulnerability. Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

IBM DB2 'REPEAT()' Heap Buffer Overflow Vulnerability

The host is installed with IBM DB2 and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2bofvulnlinfeb10.nasl 5306 2017-02-16 09:00:16Z teissa $ IBM DB2 'REPEAT' Heap Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks...

GNU Mailman Unspecified Privilege Escalation Vulnerability

Mailman is prone to an unspecified privilege-escalation scripting vulnerability. Few technical details are available at this time. Local attackers may exploit this issue to obtain elevated privileges and compromise a computer. This issue is known to affect Mailman 2.0.2 and 2.0.4; other versions...

South River Technologies WebDrive Local Privilege Escalation Vulnerability

This host is installed with South River Technologies WebDrive and is prone to Local Privilege Escalation Vulnerability. OpenVAS Vulnerability Test $Id: gbsouthriverwebdrivelocprivescvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ South River Technologies WebDrive Local Privilege Escalation...

PostgreSQL 'bitsubstr' Buffer Overflow Vulnerability

PostgreSQL is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

IBM DB2 - REPEAT() Local Heap Buffer Overflow

IBM DB2 - REPEAT Local Heap Buffer Overflow source: https://www.securityfocus.com/bid/37976/info IBM DB2 is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

IBM DB2 - 'REPEAT()' Local Heap Buffer Overflow

source: https://www.securityfocus.com/bid/37976/info IBM DB2 is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with elevated privileges or crash...

PostgreSQL - 'bitsubstr' Buffer Overflow

source: https://www.securityfocus.com/bid/37973/info PostgreSQL is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with elevated privileges or crash the...