Fedora 7 : iscsi-initiator-utils-6.2.0.865-0.0.fc7 (2007-0543)

This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release include two security fixes, bug fixes and new features. The tools in this release use a different db format, but the tools are able to read old and new formats. If you want to use the new...

openSUSE 10 Security Update : mediawiki (mediawiki-3065)

This update fixes a cross site scripting XSS bug in the AJAX features CVE-2007-0177. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mediawiki-3065. The text description of this plugin is C SU...

openSUSE 10 Security Update : awstats (awstats-1612)

This update fixes remote code execution vulnerabilities in awstats. Since backporting awstats fixes is error prone we have upgraded it to upstream version 6.6, which also includes new features. Security issues fixed: - CVE-2006-2237: missing sanitizing of the 'migrate' parameter. 173041 -...

[SECURITY] Fedora 7 Update: vavoom-1.24-3.fc7

Vavoom is an enhanced open-source port of Doom. Allowing you to play not on ly the classic 3D first-person shooter Doom, but also the Doom derived classics Heretic, Hexen and Strife. Compared to the original games it adds extra features such as translucency and freelook support and ofcourse the...

[SECURITY] Fedora 7 Update: phpPgAdmin-4.1.3-1.fc7

phpPgAdmin is a fully functional web-based administration utility for a PostgreSQL database server. It handles all the basic functionality as well as some advanced features such as triggers, views and functions stored procedures. It also has Slony-I support...

Multiple SAP Internet Graphics Service security vulnerabilities

File removal, insecure undocumented features, buffer overflow, crossite scripting...

Two Unpublished IE Cases

I'd like to publish two IE cases that I know about. Although it's too late. These two cases have already been patched. Just want to get them on the record here. Many complained that IE7's new features roadblocked hacking into this app. Well, those features are like any other Microsoft's public...

Fedora Core 5 : iscsi-initiator-utils-5.2.0.865-0.0.fc5 (2007-589)

This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release includes two security fixes which are described here https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=243719 bug fixes and new features. The tools in this release use a different db format...

Fedora Core 6 : iscsi-initiator-utils-6.2.0.865-0.0.fc6 (2007-590)

This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release includes two security fixes, which are described here, https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=243719 bug fixes and new features. The tools in this release use a different db...

Important: Red Hat Bug Fix Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 5

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. The Linux kernel handles the basic functions of the operating system. This is the fifth regular update to Red Hat Enterprise Linux 4. New features introduced in this update...

Build not dead asp-Trojan-vulnerability warning-the black bar safety net

Author: black memory This article has been published in the hacker X-Files magazine tenth copyright of the hackers X-Files on all reproduced please specify the copyright Unexpected, a few days ago I discovered that I worked extremely hard to collect the asp Trojan, and actually not a few not to b...

DEBIAN-CVE-2007-1054

Cross-site scripting XSS vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, which is processed by Internet Explorer...

DEBIAN-CVE-2007-1055

Cross-site scripting XSS vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter. NOTE: this issue might be a duplicate of CVE-2007-0177...

MediaWiki Cross-site Scripting

MediaWiki Cross-site Scripting Vulnerabilities. Date: 18/02/2007 Vendor: MediaWiki Vulnerable versions: MediaWiki 1.9.2 latest and below. Description: MediaWiki v1.8.2 and below are vulnerable to plain Cross-site scripting attack by expliting the experimental AJAX features, if enabled default. Th...

CVE-2007-0332

1 admin/adminlien.php3 and 2 admin/modif.php3 in liensdynamiques 2.1 do not require authentication, which allows remote attackers to perform unauthorized administrative actions using a direct request...

CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features

The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSUndocumentedFeatures.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Undocumented Features ================== Vulnerability...

OpenSSH 4.4 is available

OpenSSH 4.4 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100 complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH community...

CVE-2006-4480

CVE-2006-4480 affects Nuked-Klan 1.7 SP4.3. The issue is an incomplete blacklist in the nk_CSS function (nuked.php) that can bypass anti‑XSS protections, allowing remote attackers to inject arbitrary script/HTML via a JavaScript payload in an attribute value not covered by the blacklist (demonstr...

CentOS 4 : kernel (CESA-2006:0575)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system...

[Full-disclosure] Microsoft PowerPoint 0-day Vulnerability FAQ document written

I have written FAQ document including 33 items about the recently reported 0-day vulnerability in PowerPoint. This vulnerability is being exploited by Trojan horse including keylogger features. The document entitled as Microsoft PowerPoint 0-day Vulnerability FAQ is located at my SecuriTeam Blogs...