xorg: invalid array indexing in XFree86-Misc extension

Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index...

Important: xorg-x11 security update

6.8.2-1.EL.33.0.1.0.1 - Add Enterprise Linux detection - Add XFree86-4.3.0-oracle-bug-report-address-update.patch 6.8.2-1.EL.33.0.1 - cve-2007-4568.patch: XFS Integer Overflow Vulnerability - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability - cve-2007-5958.patch: Xorg...

Important:kernel security update

2.6.18-8.1.15.0.1.el5 - Fix bonding primary=ethX Bert Barbe IT 101532 ORA 5136660 - Add entropy module option to e1000/bnx2 John Sobecki ORA 6045759 2.6.18-8.1.15.el5 - dlm A TCP connection to DLM port blocks DLM operations Patrick Caulfield 245922 CVE-2007-3380 - ppc 4k page mapping support for...

rsync: Two buffer overflows

Background rsync is a file transfer program to keep remote directories synchronized. Description Sebastian Krahmer from the SUSE Security Team discovered two off-by-one errors in the function "fname" in file sender.c when processing overly long directory names. Impact A remote attacker could enti...

Important: xorg-x11-server security update

1.1.1-48.13.0.1.el5.0.1 - add Enterprise Linux detection 1.1.1-48.13.0.1.el5 - cve-2007-1003.patch. xc misc overflows 233001...

Fedora Core 5 : xorg-x11-server-1.0.1-9.fc5.7 (2007-424)

Sun Apr 8 2007 Adam Jackson 1.0.1-9.fc5.7 - xserver-CVE-2007-1003.patch: Fix CVE-2007-1003 in XC-MISC extension. - xorg-x11-server-1.0.1-intel-bridge-fix.patch: Backport an Intel PCI bridge fix from FC6. - Tue Jan 9 2007 Adam Jackson 1.0.1-9.fc5.6 - xorg-xserver-1.0.1-dbe-render.diff: CVE...

DEBIAN-CVE-2007-1003

Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...

Integer overflow

Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...

xserver XC-MISC integer overflow

Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...

xserver XC-MISC integer overflow

Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...

xserver XC-MISC integer overflow

Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...

Solaris 7 (sparc) : 106514-10

The remote host is missing Sun Security Patch number 106514-10 Sun Internet Mail Server 3.5: Misc. fixes. Date this patch was last updated by Sun : Wed May 10 18:00:00 MDT 2000 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Solaris 2.5.1 (sparc) : 105346-12

The remote host is missing Sun Security Patch number 105346-12 Solstice Internet Mail Server 2.0: Misc. fixes. Date this patch was last updated by Sun : Tue Mar 21 17:00:00 MST 2000 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

Solaris 2.6 (i386) : 105936-09

The remote host is missing Sun Security Patch number 105936-09 Solstice Internet Mail Server 3.2x86: Misc. fixes. Date this patch was last updated by Sun : Sun Oct 04 18:00:00 MDT 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...

Solaris 2.5.1 (i386) : 105347-12

The remote host is missing Sun Security Patch number 105347-12 Solstice Internet Mail Server 2.0x86: Misc. fixes. Date this patch was last updated by Sun : Tue Mar 21 17:00:00 MST 2000 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...

Solaris 2.6 (sparc) : 105346-12

The remote host is missing Sun Security Patch number 105346-12 Solstice Internet Mail Server 2.0: Misc. fixes. Date this patch was last updated by Sun : Tue Mar 21 17:00:00 MST 2000 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

Solaris 2.6 (sparc) : 105935-09

The remote host is missing Sun Security Patch number 105935-09 Solstice Internet Mail Server 3.2: Misc. fixes. Date this patch was last updated by Sun : Thu Oct 01 18:00:00 MDT 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

Solaris 2.5.1 (sparc) : 105935-09

The remote host is missing Sun Security Patch number 105935-09 Solstice Internet Mail Server 3.2: Misc. fixes. Date this patch was last updated by Sun : Thu Oct 01 18:00:00 MDT 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

CVE-2006-5439

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from thir...

CVE-2006-5439

The CVE-2006-5439 issue affects Comdev Misc Tools 4.1: PHP remote file inclusion in adminfoot.php when register_globals is enabled. An attacker can execute arbitrary PHP code by supplying a crafted URL in the path[docroot] parameter. The NVD description confirms the vulnerability and impact (part...