Debian Security Advisory DSA 232-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory DSA 232-1. OpenVAS Vulnerability Test $Id: deb2321.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 232-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 656-1 (vdr)

The remote host is missing an update to vdr announced via advisory DSA 656-1. OpenVAS Vulnerability Test $Id: deb6561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 656-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1389-1 (zoph)

The remote host is missing an update to zoph announced via advisory DSA 1389-1. OpenVAS Vulnerability Test $Id: deb13891.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1389-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2008-0035

Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted URL that triggers memory...

CVE-2008-0035

Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and Mac OS X 10.5 through 10.5.1, allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted URL that triggers memory...

CVE-2008-0035

CVE-2008-0035 affects Foundation used in Apple iPhone 1.0–1.1.2, iPod touch 1.1–1.1.2, and Mac OS X 10.5–10.5.1. Description: remote attacker can trigger memory corruption via a crafted URL in Safari, leading to denial of service or arbitrary code execution. Affected component: Safari/Foundation ...

Apache 'mod_proxy_balancer'存在多个漏洞

BUGTRAQ ID: 27236 CVE ID:CVE-2007-6420 CVE-2007-6421 CVE-2007-6422 CVE-2007-6423 CNCVE ID:CNCVE-20076420 CNCVE-20076421 CNCVE-20076422 CNCVE-20076423 Apache HTTP Server是一款开放源码的WEB服务程序。 Apache HTTP Server包含的modproxybalancer模块存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本，CSRF，拒绝服务等攻击。 1，由于所有行为通过GET访问执行，存在“CSRF”攻击。...

GLSA-200801-05 : Squid: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200801-05 Squid: Denial of Service The Wikimedia Foundation reported a memory leak vulnerability when performing cache updates. Impact : A remote attacker could perform numerous specially crafted requests to the vulnerable server,...

Race condition

Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information...

CVE-2007-5847

Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information...

CVE-2007-5847

CVE-2007-5847 is a race condition in the CFURLWriteDataAndPropertiesToResource API within Core Foundation on Mac OS X 10.4.11. The flaw causes created files to inherit insecure permissions, potentially allowing local users to access sensitive information. The vulnerability affects Mac OS X 10.4.1...

BEA AquaLogic Interaction 6.06.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities

BEA AquaLogic Interaction 6.06.1 Plumtree Portal - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/26620/info BEA AquaLogic Interaction is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to access valid usernam...

Microsoft Windows MFC Library FileFind Class Heap Overflow (CVE-2007-4916)

The Microsoft Foundation Class Library is a library that wraps portions of the Windows API in C++ classes,including functionality that enables them to use a default application framework. The vulnerability is due to an error in the FileFind Class that can be exploited via applications that use th...

Mozilla Foundation Security Advisory 2007-36

Mozilla Foundation Security Advisory 2007-36 Title: URIs with invalid -encoding mishandled by Windows Impact: Moderate Announced: October 18, 2007 Reporter: Billy Rios, Nate McFeters, Secunia Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.8 Thunderbird 2.0.0.8 SeaMonkey 1.1.5...

Mozilla Foundation Security Advisory 2007-35

Mozilla Foundation Security Advisory 2007-35 Title: XPCNativeWraper pollution using Script object Impact: Critical Announced: October 18, 2007 Reporter: mozbugra4 Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.8 SeaMonkey 1.1.5 Description Mozilla security researcher mozbugra4 reported that...

Mozilla Foundation Security Advisory 2007-29

Mozilla Foundation Security Advisory 2007-29 Title: Crashes with evidence of memory corruption rv:1.8.1.8 Impact: Critical Announced: October 18, 2007 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.8 Thunderbird 2.0.0.8 SeaMonkey 1.1.5...

Mozilla Foundation Security Advisory 2007-34

Mozilla Foundation Security Advisory 2007-34 Title: Possible file stealing through sftp protocol Impact: Moderate Announced: October 18, 2007 Reporter: Georgi Guninski Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.8 SeaMonkey 1.1.5 Description On Linux machines with gnome-vfs support the...

[SECURITY] Fedora 7 Update: mediawiki-1.9.4-35.fc7

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

Python ImageOP模块多个整数溢出漏洞

BUGTRAQ ID: 25696 Python是一种开放源代码的脚本编程语言。 Python的imageop模块实现上存在堆溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 Python的imageop模块的imageop.c和rbgimgmodule.c文件中存在整数溢出漏洞，最终会导致堆溢出。如果用户受骗打开了恶意的图形文件的话，就可能触发这些溢出，导致执行任意指令。有漏洞的代码段如下： static PyObject imageoptovideoPyObject self, PyObject args int maxx, maxy, x, y, len;...

mozilla -- code execution via Quicktime media-link files

The Mozilla Foundation reports a vulnerability within the mozilla browser. This vulnerability also affects various other browsers like firefox and seamonkey. The vulnerability is caused by QuickTime Media-Link files that contain a qtnext attribute. This could allow an attacker to start the browse...