Microsoft Security Bulletin MS08-016 – Critical Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030)

Microsoft Security Bulletin MS08-016 – Critical Vulnerabilities in Microsoft Office Could Allow Remote Code Execution 949030 Published: March 11, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Office that...

Important: Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 4 security update

Red Hat Directory Server 7.1 Service Pack 4: an updated redhat-ds package that fixes a security issue and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3 compliant server. It...

Default configuration

The default configuration for autofs 5 autofs5 in some Linux distributions, such as Red Hat Enterprise Linux RHEL 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special devic...

CVE-2007-6285

The default configuration for autofs 5 autofs5 in some Linux distributions, such as Red Hat Enterprise Linux RHEL 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special devic...

RHEL 5 : kernel (RHSA-2007:0993)

Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These ne...

RHEL 4 : pcre (RHSA-2007:1068)

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker"...

USN-417-3: PostgreSQL regression

USN-417-2 fixed a severe regression in the PostgreSQL server that was introduced in USN-417-1 and caused some valid queries to be aborted with a type error. This update fixes a similar but much less prominent error. At the same time, PostgreSQL is updated to version 8.1.8, which fixes a range of...

Microsoft Security Bulletin MS07-013 Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution (918118)

Microsoft Security Bulletin MS07-013 Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution 918118 Published: February 13, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows and/or Microsoft Office Impact of Vulnerability: Remote Code...

Microsoft Security Bulletin MS06-052 Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007)

Microsoft Security Bulletin MS06-052 Vulnerability in Pragmatic General Multicast PGM Could Allow Remote Code Execution 919007 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maxim...

RHEL 3 / 4 : freeradius (RHSA-2006:0271)

Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...

RHEL 4 : gnupg (RHSA-2006:0266)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0266 advisory. - security flaw CVE-2006-0049, CVE-2006-0455 Note that Nessus has not tested for these issues but has instead relied only on the application...

RHEL 3 : kernel (RHSA-2006:0140)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

RHEL 3 : kernel (RHSA-2005:663)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the sixth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...

Microsoft Security Bulletin MS05-008 Vulnerability in Windows Shell Could Allow Remote Code Execution (890047)

Microsoft Security Bulletin MS05-008 Vulnerability in Windows Shell Could Allow Remote Code Execution 890047 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Microsoft Security Bulletin MS05-007 Vulnerability in Windows Could Allow Information Disclosure (888302)

Microsoft Security Bulletin MS05-007 Vulnerability in Windows Could Allow Information Disclosure 888302 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Information Disclosure Maximum Severity Rating: Importa...

Microsoft Security Bulletin MS05-004 ASP.NET Path Validation Vulnerability (887219)

Microsoft Security Bulletin MS05-004 ASP.NET Path Validation Vulnerability 887219 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® .NET Framework Impact of Vulnerability: Information Disclosure, possible Elevation of Privilege...

Microsoft Security Bulletin MS05-003 Vulnerability in the Indexing Service Could Allow Remote Code Execution (871250)

Microsoft Security Bulletin MS05-003 Vulnerability in the Indexing Service Could Allow Remote Code Execution 871250 Issued: January 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...

Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service (885249)

Microsoft Security Bulletin MS04-042 Vulnerability in DHCP Could Allow Remote Code Execution and Denial of Service 885249 Issued: December 14, 2004 Version: 1.0 Summary Who should read this document: Customers who use the Microsoft DHCP Server service. Impact of Vulnerability: Remote Code Executi...

Microsoft Security Bulletin MS04-041 Vulnerability in WordPad Could Allow Code Execution (885836)

Microsoft Security Bulletin MS04-041 Vulnerability in WordPad Could Allow Code Execution 885836 Issued: December 14, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important...