CVE-2011-1111

Google Chrome before 9.0.597.107 does not properly implement forms controls, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via unknown vectors...

USN-1080-1: Linux kernel vulnerabilities

Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...

Ubuntu 9.10 : linux, linux-ec2 vulnerabilities (USN-1073-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Jacobson discovered that ThinkPad video output was not correctly...

Ubuntu 8.04 LTS : linux vulnerabilities (USN-1072-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dave Chinner discovered that the XFS filesystem did not correctly order...

CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System

CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System Issued: February 23, 2011 Updated: February 24, 2011 CA Technologies support is alerting customers to a security risk associated with CA Host-Based Intrusion Prevention System HIPS. A vulnerability exists that can allow ...

Ubuntu Update for linux vulnerabilities USN-1072-1

Ubuntu Update for Linux kernel vulnerabilities USN-1072-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10721.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux vulnerabilities USN-1072-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

DSA-2174-1 avahi - denial of service

Bulletin has no description...

USN-1073-1: Linux kernel vulnerabilities

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Jacobson discovered that ThinkPad video output was not correctly...

USN-1071-1: Linux kernel vulnerabilities

Tavis Ormandy discovered that the Linux kernel did not properly implement exception fixup. A local attacker could exploit this to crash the kernel, leading to a denial of service. CVE-2010-3086 Dan Rosenberg discovered that the Linux kernel TIPC implementation contained multiple integer signednes...

CVE-2011-0376

Cisco TelePresence endpoint devices running 1.2.x–1.6.1 are affected by CVE-2011-0376 (TFTP Information Disclosure). An unauthenticated remote attacker could retrieve sensitive authentication/config data via a TFTP GET request. The Cisco advisory assigns CSCte43876 to this issue and fixes are ava...

CVE-2011-0375

Cisco TelePresence endpoint devices running software 1.2.x–1.6.x are affected by a CGI Command Injection vulnerability (CVE-2011-0375) in the CGI implementation, requiring a remote, authenticated attacker to submit a malformed request to impact the device. The Cisco advisory lists multiple concur...

CVE-2011-0375

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671...

CVE-2011-0372

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640...

CVE-2011-0374

The CVE-2011-0374 entry corresponds to a Cisco TelePresence endpoint CGI Command Injection vulnerability affecting software 1.2.x–1.5.x. The advisory lists this defect under CSCtb31659 and confirms it as a CGI command injection vulnerability exploitable by a remote, authenticated attacker over th...

Mandriva Update for kernel MDVSA-2011:029 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2011:029 kernel Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Ubuntu Fixes Kerberos Bug With New Packages

There’s a vulnerability in the Kerberos implementation in several versions of Ubuntu, which could allow an attacker to cause a denial-of-service on vulnerable servers. The bug is in Ubuntu 8.04, Ubuntu 9.10, Ubuntu 10.04 and Ubuntu 10.10. The bug is in the Ubuntu implementation of the Kerberos...

CVE-2011-0281

CVE-2011-0281 affects MIT Kerberos 5 (krb5) in the KDC LDAP backend, where the unparse logic can be triggered by a principal name containing a backslash escape sequence (demonstrated by a \n), causing remote denial of service via file descriptor exhaustion and daemon hang. Affected versions span ...

Integer overflow

Integer signedness error in ndiiop.exe in the DIIOP implementation in the server in IBM Lotus Domino before 8.5.3 allows remote attackers to execute arbitrary code via a GIOP client request, leading to a heap-based buffer overflow...

CVE-2011-0910

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...

Code injection

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...