Important: Red Hat Security Advisory: httpd22 security update

Updated httpd22 packages that fix multiple security issues are now available for JBoss Enterprise Web Server 1.0.0 for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server...

Microsoft to Release Patches for Two Video Control Flaws

Microsoft’s July Patch Tuesday release will include a fix for the DirectShow vulnerability that was revealed in May, and the software giant said it likely will also have a patch available for a related flaw in the MsVidCtl ActiveX control that became public earlier this week and has been under...

Dowd, Hawkes Win Google Native Client Attack Contest

Mark Dowd and Ben Hawkes, two well-known security researchers, have won a contest put on by Google to find exploitable security flaws in the company’s Native Client system. The pair discovered 12 exploitable issues, seven more than the next most successful team. Dowd, a researcher in IBM ISS’s...

Medium security hole in TekRADIUS

Hi, I've identified a couple of security flaws affecting the TekRADIUS radius server for Windows which may allow privilege escalation. These issues were reported by email to the vendor and have I believe been resolved. Tim -- Tim Brown mailto:[email protected]...

High security hole in NullLogic Groupware

Hi, I've identified a couple of security flaws affecting the NullLogic Groupware which may allow compromise of accounts, denial of service or even remote code execution. These issues were reported by email to the developer but no response was forthcoming. Tim -- Tim Brown...

Axesstel MV 410R Bypass / XSS

Multiple Flaws in Axesstel MV 410R by Filip Palian filip dot palian at pjwstk dot edu dot pl Description: Axesstel MV 410R is a device offered by the two leading polish telecom operators Orange and Polish Telecom to provide broadband Internet in CDMA technology and it's already widely in use...

IBM DB2 Multiple Vulnerabilities (Windows)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2multdosvulnwin01.nasl 6530 2017-07-05 06:23:50Z cfischer $ IBM DB2 Multiple DOS Vulnerabilities Windows Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

USN-782-1: Thunderbird vulnerabilities

Several flaws were discovered in the JavaScript engine of Thunderbird. If a user had JavaScript enabled and were tricked into viewing malicious web content, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program...

RedHat Security Advisory RHSA-2009:1109

The remote host is missing updates announced in advisory RHSA-2009:1109. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple security flaws were discovered in Adobe Reader. A specially crafted PDF file could cause Adobe Reader to crash or, potentially,...

Apple Patches Old Java for Mac Vulnerabilities

Apple has finally released a Java for Mac update to fix multiple security flaws that were patched upstream more than six months ago. The fix comes three weeks after developers released proof-of-concept code to demonstrate the severity of the flaw and to nudge embarrass Apple into shipping the...

Nate Lawson on Crypto Flaws, Web Application Security and Selling Hardware Bugs

Dennis Fisher talks with Nate Lawson of Root Labs about the proliferation of crypto flaws in Web applications and the market for hardware security bugs. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of sykboy65...

Microsoft Office Word Remote Code Execution Vulnerabilities (969514)

This host is missing a critical security update according to Microsoft Bulletin MS09-027. OpenVAS Vulnerability Test $Id: secpodms09-027.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Word Remote Code Execution Vulnerabilities 969514 Authors: Sharath S Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-5339 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-5339. OpenVAS Vulnerability Test $Id: fcore20095339.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5339 wireshark Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 10 FEDORA-2009-5382 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-5382. OpenVAS Vulnerability Test $Id: fcore20095382.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5382 wireshark Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 9 FEDORA-2009-5339 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-5339. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Timing attack in Google Keyczar library

Firstly, I’m really glad to see more high-level libraries being developed so that programmers don’t have to work directly with algorithms. Keyczar is definitely a step in the right direction. Thanks to all the people who developed it. Also, thanks to Stephen Weis for responding quickly to address...

ArcaVir 2009 < 9.4.320X.9 - 'ps_drv.sys' Local Privilege Escalation

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ArcaBit Sp. z o.o. - http://www.arcabit.com/ | // // | | // // | Affected Software: | // // | ArcaVir 2009...

RedHat Security Advisory RHSA-2009:1061

The remote host is missing updates to FreeType announced in advisory RHSA-2009:1061. Tavis Ormandy of the Google Security Team discovered several integer overflow flaws in the FreeType 2 font engine. If a user loaded a carefully-crafted font file with an application linked against FreeType 2, it...

Fedora Core 10 FEDORA-2009-3599 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-3599. OpenVAS Vulnerability Test $Id: fcore20093599.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3599 wireshark Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 10 FEDORA-2009-3599 (wireshark)

The remote host is missing an update to wireshark announced via advisory FEDORA-2009-3599. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...