openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-2252)

This security update brings Mozilla Thunderbird to version 1.5.0.8. More Details can be found on this page: http://www.mozilla.org/projects/security/known-vulnerabilities.html It includes fixes to the following security problems : MFSA2006-65: Is split into 3 sub-entries, for ongoing stability...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-2251)

This update brings MozillaFirefox to the security update release 1.5.0.8, including the following security fixes. Full details can be found on: http://www.mozilla.org/projects/security/known-vulnerabilities.html MFSA2006-65: Is split into 3 sub-entries, for ongoing stability improvements in the...

DEBIAN-CVE-2007-4138

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

CVE-2007-4138

The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...

Samba nss_info extension privilege escalation

Gid 0 is assigned to user, if "winbind nss info" configuration parameter has value "sfu" or "rfc2307"...

Mozilla网络安全服务库远程拒绝服务漏洞

网络安全服务（NSS）是一组函数库，可跨平台提供SSL、S/MIME和其他Internet安全标准支持。 Sun Java Enterprise System和Java System目录服务器中所使用的NSS中存在内存泄露漏洞，如果远程攻击者执行了大量RSA加密操作的话，就会耗尽大量系统内存，导致拒绝服务。 Sun Java System Directory Server Enterprise Edition Sun Java System Directory Server 5.2 Mozilla NSS 3.11 临时解决方法： 使用以下命令重启LDAP服务进程：...

Solaris 10 (sparc) : 120473-12

SunOS 5.10: libc nss ldap PAM zfs patch. Date this patch was last updated by Sun : Jul/11/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Sun Java Enterprise Server NSS Remote Code Execution Vulnerabilities

The version of Sun Java Enterprise Server ES installed on the remote host includes a set of libraries known as Network Security Services NSS for use with many of Java ES' services. On a Windows host, though, vulnerabilities in their implementation of SSL2 support reportedly allow a remote attacke...

GLSA-200703-18 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200703-18 Mozilla Thunderbird: Multiple vulnerabilities Georgi Guninski reported a possible integer overflow in the code handling text/enhanced or text/richtext MIME emails. Additionally, various researchers reported errors in the...

Solaris 10 (sparc) : 125358-25 (deprecated)

NSSNSPRJSS 3.30.2 Solaris: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 Ma. Date this patch was last updated by Sun : Nov/09/17 This plugin has been deprecated and either replaced with individual 125358 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 10 (x86) : 125359-25 (deprecated)

NSSNSPRJSS 3.30.2 Solarisx86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.. Date this patch was last updated by Sun : Nov/11/17 This plugin has been deprecated and either replaced with individual 125359 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 8 (sparc) : 125358-25

NSSNSPRJSS 3.30.2 Solaris: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 Ma. Date this patch was last updated by Sun : Nov/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 125358-25

NSSNSPRJSS 3.30.2 Solaris: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 Ma. Date this patch was last updated by Sun : Nov/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Mozilla Thunderbird: Multiple vulnerabilities

Background Mozilla Thunderbird is a popular open-source email client from the Mozilla Project. Description Georgi Guninski reported a possible integer overflow in the code handling text/enhanced or text/richtext MIME emails. Additionally, various researchers reported errors in the JavaScript engi...

Solaris 9 (x86) : 125359-25

NSSNSPRJSS 3.30.2 Solarisx86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.. Date this patch was last updated by Sun : Nov/11/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were foun...

USN-431-1: Thunderbird vulnerabilities

The SSLv2 protocol support in the NSS library did not sufficiently check the validity of public keys presented with a SSL certificate. A malicious SSL web site using SSLv2 could potentially exploit this to execute arbitrary code with the user's privileges. CVE-2007-0008 The SSLv2 protocol support...

Mozilla Network Security Services (NSS) fails to properly process malformed SSLv2 server messages

Overview A vulnerability in the way Mozilla Network Security Services NSS handles malformed SSLv2 server messages may lead to execution of arbitrary code. Description The SSLv2 protocol uses a client master key to generate all subsequent session keys. The client master key is created using a publ...

Mozilla Network Security Services (NSS) fails to properly handle the client master key

Overview A vulnerability in the way Mozilla Network Security Services NSS handles the client master key may lead to execution of arbitrary code. Description The SSLv2 protocol uses a client master key to generate all subsequent session keys. The validity of the client master key is determined...

CentOS 4 : thunderbird (CESA-2007:0078)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 06 March 2007 Updated text description to add CVE-2007-1282 and remove...