876 matches found
CVE-2007-4192
CVE-2007-4192 describes multiple XSS vulnerabilities in the IDE Group DVD Rental System (DRS) 5.1 before 20070801, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The note questions deployment coverage by IDE Group as an MSP; if all installations are upda...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix a security issue and a bug in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These...
security flaw
Unknown vulnerability in the SGIO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations...
Mandrake Linux Security Advisory : kernel (MDKSA-2007:078)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : When SELinux hooks are enabled, the kernel could allow a local user to cause a DoS crash via a malformed file stream that triggers a NULL pointer derefernece CVE-2006-6056. Multiple buffer overflows in the 1 read and 2...
Mandrake Linux Security Advisory : kernel (MDKSA-2007:002)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which could allow a local user to cause a Denial of Service process crash CVE-2006-5173. Th...
Mandrake Linux Security Advisory : kernel (MDKSA-2006:151)
A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to and including 2.6.16-rc2, when running on x8664 systems with preemption enabled, local users can cause a DoS oops via multiple ptrace tasks that perform single steps CVE-2006-1066. Prior to 2.6.16, a...
kernel security update
CentOS Errata and Security Advisory CESA-2006:0575 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...
Important: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4
Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system...
DSA-1083-1 motor - buffer overflow
Bulletin has no description...
Debian DSA-869-1 : eric - missing input sanitising
The developers of eric, a full featured Python IDE, have fixed a bug in the processing of project files that could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securi...
Fedora Core 4 : kernel-2.6.13-1.1532_FC4 (2005-1013)
Wed Oct 19 2005 Dave Jones 2.6.13-1.1532FC4 - Fix CVE-2005-2973 ipv6 infinite loop - Disable ACPI burst again, it's still problematic. - Update to the final upstream variant of the IDE/SATA fix. - Sun Oct 16 2005 Dave Jones 2.6.13-1.1531FC4 - Stop IDE claiming legacy ports before libata in...
[SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 869-1 [email protected] http://www.debian.org/security/ Martin Schulze October 21st, 2005 http://www.debian.org/security/faq -...
eric Python IDE code execution
Possible code execution on project file opening...
[Full-disclosure] [SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 869-1 [email protected] http://www.debian.org/security/ Martin Schulze October 21st, 2005 http://www.debian.org/security/faq -...
DSA-869-1 eric - missing input sanitising
Bulletin has no description...
SPE: Insecure file permissions
Background SPE is a cross-platform Python Integrated Development Environment IDE. Description It was reported that due to an oversight all SPE's files are set as world-writeable. Impact A local attacker could modify the executable files, causing arbitrary code to be executed with the permissions ...
SPE Python Integrated Development Environment weak permissions
Application's files are world writable...
CVE-2005-3068
Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...