Low: Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update

Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Network Satellite Server 5.1. This update has been rated as having low security impact by the Red Hat Security Response Team. This update corrects several security vulnerabilities in the Sun Java...

CVE-2009-2677: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control Suite For Linux aka ICE-LX before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2008-6662: Improper Input Validation

AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption...

CVE-2008-6661: Undefined Security Weakness

Multiple integer overflows in the scanning engine in Bitdefender for Linux 7.60825 and earlier allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a malformed 1 NeoLite and 2 ASProtect packed PE file...

[SECURITY] Fedora 9 Update: google-gadgets-0.10.5-4.fc9

Google Gadgets for Linux provides a platform for running desktop gadgets under Linux, catering to the unique needs of Linux users. It can run, without modification, many Google Desktop gadgets as well as the Universal Gadgets on iGoogle...

Ubuntu Update for ruby1.9 vulnerability USN-691-1

Ubuntu Update for Linux kernel vulnerabilities USN-691-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6911.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ruby1.9 vulnerability USN-691-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

F-Secure Products Integer Overflow Vulnerability (Oct 2008) - Linux

F-Secure Products is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for google-gadgets FEDORA-2008-9669

Check for the Version of google-gadgets OpenVAS Vulnerability Test Fedora Update for google-gadgets FEDORA-2008-9669 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2008-5499: Improper Control of Generation of Code

Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...

XAMPP Linux 1.6 - 'iart.php?text' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30535/info XAMPP for Linux is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

[SECURITY] Fedora 8 Update: zoneminder-1.22.3-10.fc8

ZoneMinder is a set of applications which is intended to provide a complete solution allowing you to capture, analyse, record and monitor any cameras y ou have attached to a Linux based machine. It is designed to run on kernels wh ich support the Video For Linux V4L interface and has been tested...

CVE-2008-1213: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Numara FootPrints for Linux 8.1 allows remote attackers to inject arbitrary web script or HTML via the Title form field when setting an appointment. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

JVN#50495547 Ichitaro series buffer overflow vulnerability

The "Ichitaro" series word processing software, from JustSystems Corporation, contains a buffer overflow vulnerability. If a user opens a specially crafted jtd file or views it on a web browser, an attacker could execute arbitrary code with the privileges of the user. Impact An attacker could...

CVE-2007-3908: Undefined Security Weakness

Unspecified vulnerability in HP ServiceGuard for Linux for Red Hat Enterprise Linux RHEL 2.1 SG A.11.14.04 through A.11.14.06; RHEL 3.0 SG A.11.16.04 through A.11.16.10; and ServiceGuard Cluster Object Manager B.03.01.02 allows local users to gain privileges via unspecified vectors, a different...

CVE-2007-1357: Undefined Security Weakness

The atalksumskb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service crash via an AppleTalk frame that is shorter than the specified length, which triggers a BUGON call when an attempt is made to perform a checksum...

CVE-2007-1168: Undefined Security Weakness

Trend Micro ServerProtect for Linux SPLX 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx2376info cookie to the web interface port 14942/tcp...

CVE-2007-1169: Undefined Security Weakness

The web interface in Trend Micro ServerProtect for Linux SPLX 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the network...

[security bulletin] HBSBGN02189 SSRT071297 rev.1 ServiceGuard for Linux, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00860750 Version: 1 HBSBGN02189 SSRT071297 rev.1 ServiceGuard for Linux, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

CVE-2007-0980: Undefined Security Weakness

Unspecified vulnerability in HP Serviceguard for Linux; packaged for SuSE SLES8 and United Linux 1.0 before SG A.11.15.07, SuSE SLES9 and SLES10 before SG A.11.16.10, and Red Hat Enterprise Linux RHEL before SG A.11.16.10; allows remote attackers to obtain unauthorized access via unspecified...