Linux Foundation Shuts More Web Sites After Discovering Compromise

The ripple effects of an August attack on the website kernel.org washed up on the Linux Foundation last week, forcing the group to take down its Web site and warn users that their account information may have been compromised. A message posted on the Foundation’s Web site, linux.com, over the...

Mandriva Update for mozilla MDVSA-2011:133 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2011:133 mozilla Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Linux Foundation & Linux.com multiple server compromised

Linux Foundation & Linux.com multiple server compromised The Linux Foundation has pulled its websites from the web to clean up from a "security breach". A notice posted on the Linux Foundation said the entire infrastructure including LinuxFoundation.org, Linux.com, and their subdomains are down f...

Several Vulnerabilities in extension MailformPlus (th_mailformplus)

Several vulnerabilities have been found in the following third-party TYPO3 extension: thmailformplus Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.0.15 and below Vulnerability Types: Cross-Site Scripting Severit...

Mandriva Linux Security Advisory : dhcp (MDVSA-2011:128)

Multiple vulnerabilities has been discovered and corrected in dhcp : The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service daemon exit via a crafted DHCP packet CVE-2011-2748. The server in IS...

Mandriva Update for dhcp MDVSA-2011:128 (dhcp)

Check for the Version of dhcp OpenVAS Vulnerability Test Mandriva Update for dhcp MDVSA-2011:128 dhcp Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Linux Security Advisory : mozilla (MDVSA-2011:127)

Security issues were identified and fixed in mozilla firefox and thunderbird : Mozilla developers and community members identified and fixed several memory safety bugs in the browser engine used in Firefox 3.6 and other Mozilla-based products. Some of these bugs showed evidence of memory corrupti...

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2011:126)

Multiple vulnerabilities were discovered and corrected in java-1.6.0-openjdk : Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote untrusted Java Web Start applications...

Mandriva Linux Security Advisory : clamav (MDVSA-2011:122)

A vulnerability has been discovered and corrected in clamav : Off-by-one error in the clihmscan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service daemon crash via an e-mail message that is not properly handled during certain hash...

Mandriva Update for bind MDVA-2011:027 (bind)

Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDVA-2011:027 bind Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for bind MDVA-2011:027 (bind)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

MDVA-2011:027 : bind

This is maintenance release that upgrades ISC BIND to the 9.7.4 version that addresses a lot of upstream bugs and fixes. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, In...

[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.3.2-1.fc15

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

Mandriva Update for libsndfile MDVSA-2011:119 (libsndfile)

Check for the Version of libsndfile OpenVAS Vulnerability Test Mandriva Update for libsndfile MDVSA-2011:119 libsndfile Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for curl MDVSA-2011:116 (curl)

Check for the Version of curl OpenVAS Vulnerability Test Mandriva Update for curl MDVSA-2011:116 curl Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Cow CMS, SME website management system upload vulnerability and fix-vulnerability warning-the black bar safety net

Cow CMS is in the enterprise retail network is designed for SME website development website management system, The Company's business scope covers Internet security software systems and Internet Security Systems Development, Business website planning, web design, hosting, website maintenance,...

Mandriva Linux Security Advisory : bind (MDVSA-2011:115)

A vulnerability was discovered and corrected in bind : Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3, 9.7.x before 9.7.3-P3, and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service named daemon crash via a crafted UPDATE request CVE-2011-2464. Packages...

Mandriva Linux Security Advisory : blender (MDVSA-2011:112)

Multiple vulnerabilities have been identified and fixed in blender : oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an...

[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.3.1-1.fc14

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

ISC BIND 9 RPZ配置远程拒绝服务漏洞

BUGTRAQ ID: 48565 CVE ID: CVE-2011-2465 BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 ISC BIND在某些RPZ配置中存在拒绝服务漏洞，远程攻击者可利用此漏洞使受影响应用程序崩溃，造成拒绝服务。 在处理DNAME和CNAME记录时，RPZ功能中存在错误，可被利用终止named进程。如果服务器启用了递归并用包含某些类型记录的RPZ区域配置，则在查询时，BIND受影响版本中的错误可造成named进程退出。 ISC BIND 9.7.1-P2 ISC BIND 9.7.1-P1 ISC BIND...