9804 matches found
Mandriva Linux Security Advisory : php-pear (MDVSA-2011:187)
A vulnerability has been discovered and corrected in php-pear : The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different...
Nagios XI Privilege Escalation
================ Privilege escalation vulnerabilities in Nagios XI installer /dev/null; then cd /tmp rpm -Uvh epel-release.rpm ----- Vulnerability 2: Arbitrary crontab intallation ----- Files: install-crontab-root install-crontab-nagios uninstall-crontab-nagios A malicious user can exploit a race...
Cnet Apologizes for Nmap Adware Bundling
Officials at Cnet’s Download.com site have issued a statement apologizing for bundling the popular open source Nmap security audit application with adware that changed users’ search engine and home page to Microsoft properties. Fyodor, the author of Nmap, raised the issue earlier this week, sayin...
php-pear: symlink vulnerability in PEAR installer
The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different vulnerability than CVE-2007-2519...
Windows Kernel Zero Day Vulnerability Found in Duqu Installer
Windows Kernel Zero Day Vulnerability Found in Duqu Installer Duqu malware attack exploited a zero-day vulnerability in the Windows kernel, according to security researchers tracking the Stuxnet-like cyber-surveillance Trojan. The vulnerability has since been reported to Microsoft and Microsoft i...
Google Chrome < 14.0.835.163 Multiple Vulnerabilities
Binary data 800955.prm...
CVE-2011-2842
The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors...
Design/Logic Flaw
The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors...
CVE-2011-2842
The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors...
CVE-2011-2842
Summary (CVE-2011-2842) Google Chrome for Mac OS X (pre-14.0.835.163) is affected by an issue in the installer that handles lock files insecurely. This is documented as “Insecure lock file handling in the Mac installer,” with the NVD entry noting the vulnerability affects the Mac installer and ha...
PT-2011-4138
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.163 Description The issue is related to the installer in Google Chrome, which does not properly handle lock files. This has an unspecified impact and attack vectors. Recommendations For versions prior t...
CVE-2011-2842: Improper Input Validation
The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors...
Google Fixes More Than 30 Flaws in Chrome
Google has fixed more than 30 security vulnerabilities in its Chrome browser with a new version the company released on Friday. The company also paid out more than $14,000 in rewards to the various researchers who reported bugs that were fixed with Chrome 14.0.835.163. The new version of Chrome...
Stable Channel Update
The Chrome Stable channel has been updated to 14.0.835.163 for all platforms. This release contains the following security fixes. More details about high level features can be found on the Google Chrome blog. Security fixes and rewards: Please see the Chromium security page for more detail. Note...
Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001)
This host is missing an important security update according to Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-001.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.6 Multiple Vulnerabilities 2011-001 Authors: Antu Sanadi Copyright:...
Matriux Krypton security distribution Released
Matriux Krypton security distribution Released The Matriux is a fully featured security distribution consisting of a bunch of powerful, open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking, system and network...
Wireshark 1.6.1 and 1.4.8 Released
Wireshark 1.6.1 and 1.4.8 Released Wireshark 1.6.1 and 1.4.8 have been released. Installers for Windows, Mac OS X 10.5.5 and above Intel and PPC, and source code are now available. In 1.6.1 Two vulnerabilities have been fixed. See the advisory for details. Many other bugs have been fixed. For a...
CVE-2011-2285
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Installer...