[SECURITY] Fedora 9 Update: pdns-2.9.21.1-1.fc9

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

Cross site scripting

Cross-site scripting XSS vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0; Citrix XenServer Dell Edition Express and Enterprise 4.1.0; and HP integrated Citrix XenServer Select and Enterprise 4.1.0 allows remote attackers to inject...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : linux, linux-source-2.6.15/20/22 vulnerabilities (USN-625-1)

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

USN-625-1: Linux kernel vulnerabilities

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

Enumerate MAC Addresses via SSH

Nessus was able to enumerate MAC addresses by connecting to the remote host via SSH with the supplied credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33276; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/12/20";...

Fedora 8 : net-snmp-5.4.1-7.fc8 (2008-5218)

Tue Jun 10 2008 Jan Safranek 5.4.1-7 - fix various flaws CVE-2008-2292 CVE-2008-0960 - Thu Feb 14 2008 Jan Safranek 5.4.1-6 - fixing ipNetToMediaNetAddress to show IP address 432780 - Thu Nov 15 2007 Jan Safranek 5.4.1-5 - added procps to build dependencies 380321 - fix crash on reading xen...

Roundup: Permission bypass

Background Roundup is an issue-tracking system with command-line, web and e-mail interfaces. Description Philipp Gortan reported that the xml-rpc server in Roundup does not check property permissions CVE-2008-1475. Furthermore, Roland Meister discovered multiple vulnerabilities caused by...

[SECURITY] Fedora 8 Update: roundup-1.4.4-1.fc8

Roundup is a simple and flexible issue-tracking system with command line, web and email interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition...

Java-API calls in untrusted Javascript allow network privilege escalation

Unspecified vulnerability in Sun JDK and Java Runtime Environment JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.216 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java AP...

[SECURITY] Fedora 8 Update: cups-1.3.6-2.fc8

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Cross site request forgery (csrf)

The editor deletion form in BUEditor 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.1, a module for Drupal, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete custom editor interfaces...

Fedora 7 : net-snmp-5.4-16.fc7 (2007-3019)

Fri Oct 19 2007 Jan Safranek 5.4-16 - License: field fixed to 'BSD and CMU' - fix hrSWInst 250237 - fix leak in UDP transport 247771 - fix remote DoS attack CVE-2007-5846 - Mon Oct 8 2007 Jan Safranek 5.4-15 - License: field changed to MIT - fix segfault on parsing smuxpeer without password...

[SECURITY] Fedora 8 Update: zaptel-1.4.6-1.fc8

Tools and libraries for using/configuring/monitoring Zapata telephony interfaces...

[SECURITY] Fedora 7 Update: zaptel-1.4.6-1.fc7

Tools and libraries for using/configuring/monitoring Zapata telephony interfaces...

[SECURITY] Fedora 7 Update: cups-1.2.12-6.fc7

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

CVE-2007-5539

Unspecified vulnerability in Cisco Unified Intelligent Contact Management Enterprise ICME, Unified ICM Hosted ICMH, Unified Contact Center Enterprise UCCE, Unified Contact Center Hosted UCCH, and System Unified Contact Center Enterprise SUCCE 7.15 allows remote authenticated users to gain...

Code injection

Unspecified vulnerability in Cisco Unified Intelligent Contact Management Enterprise ICME, Unified ICM Hosted ICMH, Unified Contact Center Enterprise UCCE, Unified Contact Center Hosted UCCH, and System Unified Contact Center Enterprise SUCCE 7.15 allows remote authenticated users to gain...

CVE-2007-5539

Cisco UC/ICM suite components (ICME, ICMH, UCCE, UCCH, SUCCE) version 7.1(5) contain an unspecified vulnerability that allows remote authenticated users to gain privileges, read reports, or alter SUCCE configuration via certain web interfaces. The exact root cause, affected subcomponents, and exp...

openSUSE 10 Security Update : hplip (hplip-4516)

The deamon 'hpssd' could be exploited by users to execute arbitrary commands as root. hpssd only runs on systems that have HP all-in-one devices configured. In the default configuration the problem is not remotely exploitable as hpssd only listens on local interfaces CVE-2007-5208. %NASLMINLEVEL...

CVE-2007-5134

Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel EOBC internal communication, which might allow remote attackers to send packets to an interface for which network exposure was unintended...