Fedora Update for trac FEDORA-2008-6833

Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2008-6833 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for trac FEDORA-2008-6830

Check for the Version of trac OpenVAS Vulnerability Test Fedora Update for trac FEDORA-2008-6830 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for ipa FEDORA-2008-7987

Check for the Version of ipa OpenVAS Vulnerability Test Fedora Update for ipa FEDORA-2008-7987 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Cross site scripting

Cross-site scripting XSS vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05, 08-11 through 08-11-03, and 08-50 through 08-50-03 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5717

Cross-site scripting XSS vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05, 08-11 through 08-11-03, and 08-50 through 08-50-03 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5717

CVE-2008-5717 is a cross-site scripting vulnerability in Hitachi JP1/Integrated Management - Service Support for Windows. Affected components/version ranges include 08-10 to 08-10-05, 08-11 to 08-11-03, and 08-50 to 08-50-03. Root cause: improper handling of input in the web interface allows inje...

JP1/Integrated Management Service Support Cross-Site Scripting Vulnerability

Overview JP1/Integrated Management Service Support is vulnerable to cross-site scripting due to failure to properly process requests. Impact An attacker could perform cross-site scripting attacks by embedding malicious scripts in a request. Solution Please refer to the 'Vendor Information' sectio...

Sun Integrated Lights-Out Manager (ILOM)验证绕过漏洞

BUGTRAQ ID: 31861 CNCAN ID：CNCAN-2008102309 Sun Integrated Lights-Out Manager是一款管理、监视和控制服务处理机的应用程序。 Sun Integrated Lights-Out Manager存在一个未明错误，远程攻击者可以利用漏洞绕过验证，通过WEB接口访问服务处理器。 这允许用户关闭或重置系统，导致拒绝服务攻击。 Sun Sun Netra X4450 0 Sun Sun Netra X4250 0 Sun Sun Netra X4200 M2 0 Sun Sun Netra T5440 0 Sun Sun...

CVE-2008-4722

Unspecified vulnerability in Sun Integrated Lights-Out Manager ILOM 2.0.1.5 through 2.0.4.26 allows remote authenticated users to 1 access the service processor SP and cause a denial of service shutdown or reboot, or 2 access the host operating system and have an unspecified impact, via unknown...

CVE-2008-4722

Unspecified vulnerability in Sun Integrated Lights-Out Manager ILOM 2.0.1.5 through 2.0.4.26 allows remote authenticated users to 1 access the service processor SP and cause a denial of service shutdown or reboot, or 2 access the host operating system and have an unspecified impact, via unknown...

Cisco 871集成服务路由器跨站请求伪造漏洞

BUGTRAQ ID: 31218 Cisco 871集成服务路由器是一款小型的宽带无线路由器。 Cisco 871路由器的HTTP管理接口存在跨站请求伪造漏洞，如果用户受骗查看了嵌有恶意代码的网页的话，就会导致在路由器上以15级权限（root）执行任意命令。 Cisco 871 Integrated Services Router Cisco ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cisco.com/warp/public/707/advisory.html html body body...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...

FreeBSD Security Advisory (FreeBSD-SA-05:06.iir.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:06.iir.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

I4L: fix isdn_ioctl memory issue

The isdnioctl function in isdncommon.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow...

Ingres用户认证非授权访问漏洞

BUGTRAQ ID: 26959 CVECAN ID: CVE-2007-6334 Ingres是很多CA产品默认所使用的数据库后端。 Windows平台上的Ingres数据库为之后连接的用户分配了与第一个连接用户相同的权限和身份，这允许远程攻击者获得非授权访问。仅在运行于Microsoft IIS Web服务器上且启用了集成Windows认证（IWA）选项的情况下才会出现这个漏洞。 Ingres Corporation Ingres Database 2.6 Ingres Corporation Ingres Database 2.5 厂商补丁： Ingres Corporation...

Computer Associates eTrust Threat Management控制台HTML注入漏洞

Computer Associates eTrust Integrated Threat Management是一款基于Web的安全威胁管理中央控制台。 CA eTrust Integrated Threat Management控制台不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行HTML注入攻击，获得敏感信息。 问题是对IP地址的数据缺少过滤，可造成HTML注入攻击。 Computer Associates eTrust Integrated Threat Management 8.0 目前没有解决方案提供：...

[SECURITY] Fedora 7 Update: kdevelop-3.5.0-4.fc7

The KDevelop Integrated Development Environment provides many features that developers need as well as providing a unified interface to programs like gdb, the C/C++ compiler, and make. KDevelop manages or provides: All development tools needed for C++ programming like Compiler, Linker, automake a...

[SECURITY] Fedora 8 Update: koffice-1.6.3-13.fc8

KOffice - Integrated Office Suite KOffice is a free, integrated office suite for KDE, the K Desktop Environme nt...

Microsoft Visual Studio PDWizard.ocx ActiveX Control Code Execution (CVE-2007-4891)

Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications, and web services.The vulnerability is due to an error in the Microsoft Visual...

[SECURITY] Fedora 7 Update: sylpheed-2.3.1-5

This program is an X based fast email client which has features like: o user-friendly and intuitive interface o integrated NetNews client partially implemented o ability of keyboard-only operation o Mew/Wanderlust-like key bind o multipart MIME o unlimited multiple account handling o message...