OracleVM 3.2 : sudo (OVMSA-2016-0079)

The remote OracleVM system is missing necessary patches to address critical security updates : - added patch for CVE-2014-0106: certain environment variables not sanitized when envreset is disabled Resolves: rhbz1072210 - backported fixes for CVE-2013-1775 CVE-2013-1776 CVE-2013-2776 CVE-2013-277...

Kerio MailServer < 6.3.1 remote Denial of Service

Hi, Kerio MailServer 6.3.1 changelog mentions the following bug fix: 'Fixed possible service stop when handling certain LDAP query' It turns out that vdkms6 vulnerability which is a part of VulnDisco since Oct, 2006 has been fixed. Below is a simple proof of concept code for this bug: !/usr/bin/e...