CVE-2008-5684

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

Session fixation

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

CVE-2008-5684

CVE-2008-5684 affects Sun Solaris 8–10 and OpenSolaris before snv_85 due to a libICE issue; allows context-dependent denial of service, shown by a port-scan-triggered segmentation fault in gnome-session. Connected docs reference Xsun/X11 patches for Solaris 10, but explicit libICE remediation det...

pidgin security and bug fix update

2.5.2-6 - Automatically detect booleans to enable build features from dist tag - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain 2.5.2-2 - Upstream backports: 100: sametime-redirect-null crash 101: NetworkManager-improvement 102: no-password-in-dialog-if-not-remembering 103...

Vinagre < 2.24.2 show_error() Remote Format String PoC

Exploit for unknown platform in category dos / poc ====================================================== Vinagre 2.24.2 showerror Remote Format String PoC ====================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs...

Vinagre show_error() format string vulnerability

1. Advisory Information Title: Vinagre showerror format string vulnerability Advisory ID: CORE-2008-1127 Advisory URL:http://www.coresecurity.com/core-labs/advisories/vinagre-format-string Date published: 2008-12-09 Date of last update: 2008-12-09 Vendors contacted: Vinagre team Release mode:...

[SECURITY] Fedora 10 Update: vinagre-2.24.2-1.fc10

Vinagre is a VNC client for the GNOME desktop environment...

[SECURITY] Fedora 8 Update: vinagre-0.4-2.fc8

Vinagre is a VNC client for the GNOME desktop environment...

[SECURITY] Fedora 9 Update: vinagre-0.5.2-1.fc9

Vinagre is a VNC client for the GNOME desktop environment...

CVE-2008-5143

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

Arbitrary file deletion

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

CVE-2008-5143

CVE-2008-5143 affects mgt-helper in multi-gnome-terminal 1.6.2. The vulnerability allows local users to overwrite arbitrary files via a symlink attack on temporary files in /tmp, specifically targeting files matching *.debug or *.env. The root cause is a symlink-related race condition during file...

CVE-2008-5143

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

Debian DSA-1666-1 : libxml2 - several vulnerabilities

Several vulnerabilities have been discovered in the GNOME XML library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4225 Drew Yao discovered that missing input sanitising in the xmlBufferResize function may lead to an infinite loop, resulting in...

[SECURITY] [DSA 1666-1] New libxml2 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1666-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 17, 2008 http://www.debian.org/security/faq -...

DSA-1666-1 libxml2 - several vulnerabilities

Bulletin has no description...

[SECURITY] Fedora 9 Update: gnome-web-photo-0.3-15.fc9

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

[SECURITY] Fedora 9 Update: totem-2.23.2-8.fc9

Totem is simple movie player for the Gnome desktop. It features a simple playlist, a full-screen mode, seek and volume controls, as well as a pretty complete keyboard navigation...

[SECURITY] Fedora 9 Update: gnome-python2-extras-2.19.1-21.fc9

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

[SECURITY] Fedora 9 Update: galeon-2.0.7-3.fc9

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...