[SECURITY] Fedora 20 Update: proftpd-1.3.4d-4.fc20

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 18 Update: proftpd-1.3.4d-4.fc18

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 18 Update: glpi-0.83.9.1-4.fc18

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Fedora Update for lldpad FEDORA-2013-12178

Check for the Version of lldpad OpenVAS Vulnerability Test Fedora Update for lldpad FEDORA-2013-12178 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Scientific Linux Security Update : nss, nss-util, nss-softokn, and nspr on SL6.x i386/x86_64 (20130807)

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding...

CVE-2013-4015

Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the 1 Protected Mode or 2 Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code...

Privilege escalation

Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the 1 Protected Mode or 2 Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code...

CVE-2013-4015

Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the 1 Protected Mode or 2 Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code...

[SECURITY] Fedora 18 Update: lldpad-0.9.45-4.fc18

This package contains the Linux user space daemon and configuration tool for Intel LLDP Agent with Enhanced Ethernet support for the Data Center...

[SECURITY] Fedora 19 Update: lldpad-0.9.46-2.fc19

This package contains the Linux user space daemon and configuration tool for Intel LLDP Agent with Enhanced Ethernet support for the Data Center...

Oracle Linux 5 : kernel (ELSA-2012-1323-1)

From Red Hat Security Advisory 2012:1323 : Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...

Google Adds Feature to Keep Malware Out of Chrome Web Store

Google is adding more security controls to its browser-based Chrome Web Store by adding a new application-vetting feature called ‘Enhanced Item Validation.’ For all intents and purposes, the search giant claims that the new policy will only impact application developers in that they will have to...

[SECURITY] Fedora 19 Update: kcalc-4.10.4-1.fc19

KCalc is a calculator which offers many more mathematical functions than meet the eye on a first glance...

Lenovo ThinkPad Bluetooth with Enhanced Data Rate Arbitrary DLL Injection Code Execution Vulnerability

The remote host has a version of Lenovo ThinkPad Bluetooth with Enhanced Data Rate installed that uses fixed paths for including DLL files that may not be trusted. By tricking a user into opening a file in a directory accessible by an attacker, it may be possible to inject and execute code from...

Lenovo ThinkPad Bluetooth with Enhanced Data Rate Detection

The remote host has Lenovo ThinkPad Bluetooth with Enhanced Data Rate installed, a set of drivers and tools for managing Bluetooth connections on Lenovo ThinkPad computers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65985; scriptversion"1.8";...

Moderate: Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update

Updated openstack-nova packages that fix two security issues, several bugs, and add an enhancement are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whi...

CoreFTP contains a buffer overflow vulnerability

Overview CoreFTP contains a buffer overflow when parsing long directory names. Description CoreFTP is susceptible to a buffer overflow when parsing long directory names from a malicious FTP server. The LIST, VIEW, commands are vulnerable to a denial of service and the DELE command has been report...

Nuance PDF viewing products contain multiple vulnerabilities

Overview Nuance PDF viewing products contain multiple memory-corruption vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Nuance provides two similar PDF viewing products called PDF Reader and PDF Viewer Plus. Both of...

Vulnerability in Lenovo ThinkPad Bluetooth with Enhanced Data Rate Software Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Lenovo ThinkPad Bluetooth with Enhanced Data Rate Software version 6.4.0.2900 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated...

Microsoft Internet Explorer 6/7/8 mshtml!CDwnBindInfo对象释放后重用代码执行漏洞

BUGTRAQ ID: 57070 CVECAN ID: CVE-2012-4792 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer在mshtml!CDwnBindInfo对象的处理上存在释放后重用漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页内容导致执行任意代码控制用户系统。 此漏洞是0day漏洞，目前已被发现用于执行针对性的攻击。 不受影响系统： Microsoft Internet Explorer 9.x Microsoft Internet Explorer 10.x 0 Microsoft...