postgresql, rh security update

CentOS Errata and Security Advisory CESA-2005:433 Updated postgresql packages that fix several security vulnerabilities and risks of data loss are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...

CVE-2005-0356

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers PAWS with the timestamps option enabled allow remote attackers to cause a denial of service connection loss via a spoofed packet with a large timer value, which causes the host to discard later packets because they appe...

CVE-2005-0356

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers PAWS with the timestamps option enabled allow remote attackers to cause a denial of service connection loss via a spoofed packet with a large timer value, which causes the host to discard later packets because they appe...

CVE-2005-1717

ZyXEL Prestige 650R-31 router running ZyNOS FW v3.40KO.1 allows remote attackers to cause a denial of service CPU consumption and network loss via crafted fragmented IP packets...

evolution security update

CentOS Errata and Security Advisory CESA-2005:238 Updated evolution packages that fix various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools...

Low: Red Hat Security Advisory: evolution security update

Updated evolution packages that fix various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. Evolution includes a mailer, calendar, contact manage...

Skull-Splitter Guestbook Multiple Field XSS

The remote version of this software is vulnerable to cross-site scripting attacks. Inserting special characters into the subject or message content can cause arbitrary script code execution for third-party users, thus resulting in a loss of integrity of their system. %NASLMINLEVEL 70300 This scri...

ColdFusion Error Page XSS

Binary data 2893.prm...

Software602 602Pro LAN SUITE < 2004.0.05.0509 Directory Traversal Arbitrary File Access

Binary data 2883.prm...

CVE-2001-1435

CVE-2001-1435 affects Compaq Tru64 UNIX 5.1 where inetd can cause a denial of service by a core dump during startup of one served service, taking down all inetd services. The documents do not provide exploit details or a remediation/patch version.

CVE-2002-1642

This CVE affects PostgreSQL 7.2.1 and 7.2.2. The vulnerability arises in the VACUUM path, where local users can delete transaction log data (pg_clog), leading to a denial of service and potential data loss. The connected Red Hat/RH and NVD sources corroborate that the issue concerns local access ...

Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py

http://www.python.org/security/PSF-2005-001/ --------------------------------------------------------------------- Python Security Advisory Advisory ID: PSF-2005-001 Issue Date: February 3, 2005 Product: Python Versions: 2.2 all versions, 2.3 prior to 2.3.5, 2.4 CVE Names: CAN-2005-0089...

python -- SimpleXMLRPCServer.py allows unrestricted traversal

According to Python Security Advisory PSF-2005-001, The Python development team has discovered a flaw in the SimpleXMLRPCServer library module which can give remote attackers access to internals of the registered object or its module or possibly other modules. The flaw only affects Python XML-RPC...

RHEL 3 : rh-postgresql (RHSA-2004:489)

Updated rh-postgresql packages that fix various bugs are now available. PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects, and user-defined types and functions. Trustix has identified improper...

PunBB URL Quote Tag XSS

According to its banner, the remote version of PunBB is vulnerable to cross-site scripting attacks because the application does not validate URL and quote tags. With a specially crafted URL, an attacker may be able to inject arbitrary HTML and script code into a user's browser, resulting in a los...

ht://Dig htsearch.cgi words Parameter XSS

The 'htsearch' CGI, which is part of the ht://Dig package, is vulnerable to cross-site scripting attacks, through the 'words' variable. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. %NASLMINLEVEL 70300 C Tenable Network Security, In...

FreeBSD : tor -- remote DoS and loss of anonymity (195)

The following package needs to be updated: tor %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg8e2e6ad8172011d99fb900902788733b.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006...

[Full-Disclosure] [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 RIM Blackberry buffer overflow, DoS, data loss Classification: =============== Level: low-med-HIGH-crit ID: HEXVIEW200410121 Overview: ========= RIM Blackberry is a Java-based wireless connectivity solution providing phone, e-mail, and other services ...

Engenio/LSI Logic controllers denial of service/data corruption

Product : Engenio/LSI Logic storage controllers, including: - Storagetek D280 verified, - IBM FastT 100 verified, - Probably all other Storagetek and IBM FastT storage controllers since the software part is almost identical, - Maybe some SGI and Teradata storage controllers unverified, - Some...

WU-FTPD S/KEY Authentication ftpd.c skey_challenge Function Remote Overflow

This version of WU-FTPD contains a remote overflow if s/key support is enabled. The skeychallenge function fails to perform bounds checking on the name variable resulting in a buffer overflow. With a specially crafted request, an attacker can execute arbitrary code resulting in a loss of integrit...