Linux Kernel “sound/oss/midi_synth.c”内存破坏漏洞

BUGTRAQ ID: 47007 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel “sound/oss/midisynth.c”在实现上存在内存破坏漏洞，本地攻击者可利用此漏洞造成内存破坏，在非x86架构上，可允许攻击者运行任意代码，造成拒绝服务。此漏洞亦可影响OSS子系统。 传递到midisynthloadpatch的偏移可以是任意的，如果大于标头值，会造成copyfromuserdst, src,...

AIX 6.1 TL 3 : bos.net.tcp.client (U839021)

The remote host is missing AIX PTF U839021, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U839021. The text itself is copyright C...

AIX 530011 : U840352

The remote host is missing AIX PTF U840352 which is related to the security of the package devices.pci.1410bd02.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

TomatoCMS 2.0.6 任意文件上传和跨站脚本漏洞

BUGTRAQ ID: 40544 CVE ID: CVE-2010-1514,CVE-2010-1515 TomatoCMS是一款开源的内容管理系统。 在向TomatoCMS添加新文章时没有对所上传的文件执行重复的验证，拥有Add new article、Upload file to server和Browse uploaded files权限的用户可以向服务器上传并执行恶意文件。 TomatoCMS没有正确地过滤提交给index.php/admin/news/article/list页面的keyword和article-...

AIX 530009 : U832969

The remote host is missing AIX PTF U832969 which is related to the security of the package bos.net.tcp.server You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610004 : U833931

The remote host is missing AIX PTF U833931 which is related to the security of the package bos.dlc.8023 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U828668

The remote host is missing AIX PTF U828668 which is related to the security of the package bos.rte.libcfg You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530011 : U829881

The remote host is missing AIX PTF U829881 which is related to the security of the package bos.rte.filesystem You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Solaris Update for PostgresSQL 123591-12

Check for the Version of PostgresSQL OpenVAS Vulnerability Test Solaris Update for PostgresSQL 123591-12 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

AIX 530007 : U829607

The remote host is missing AIX PTF U829607 which is related to the security of the package devices.pci.14101403.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610002 : U828285

The remote host is missing AIX PTF U828285 which is related to the security of the package devices.common.IBM.usb.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Zorum index.php多个参数SQL注入漏洞

BUGTRAQ: 18681 Zorum是一款用PHP实现的免费开源论坛程序。 Zorum处理用户请求时存在多个输入验证漏洞，远程攻击者可能利用此漏洞对服务器进行SQL注入攻击。 Zorum的index.php脚本没有正确的过滤用户输入中的offset、tid、fromid、sortby、fromfrommethod和fromfromlist参数，允许远程攻击者执行SQL注入攻击。 BUGTRAQ: 18681 厂商补丁： PHPOutsourcing -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

MDVA-2009:155 : beagle

The mozilla-thunderbird-beagle package was not rebuilt for mozilla-thunderbird 2.0.0.23. This update solves this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

MDVA-2009:105 : fuse

FUSE default setup was requiring non privileged users to be added manually to fuse group to be able to use fuse feature and this feature was not available immediatly after fuse package installation. This package updates ensure fuse is now immediatly available after package installation and for al...

AIX 530009 : U825212

The remote host is missing AIX PTF U825212 which is related to the security of the package devices.chrp.IBM.lhca.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

Solaris Update for dtsession 125280-05

Check for the Version of dtsession OpenVAS Vulnerability Test Solaris Update for dtsession 125280-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Solaris Update for platmod for Volume System H/W Series Products 112169-07

Check for the Version of platmod for Volume System H/W Series Products OpenVAS Vulnerability Test Solaris Update for platmod for Volume System H/W Series Products 112169-07 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Solaris Update for telnet 119433-01

Check for the Version of telnet OpenVAS Vulnerability Test Solaris Update for telnet 119433-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for CDE 1.4 110335-03

Check for the Version of CDE 1.4 OpenVAS Vulnerability Test Solaris Update for CDE 1.4 110335-03 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Solaris Update for devfs 138270-02

Check for the Version of devfs OpenVAS Vulnerability Test Solaris Update for devfs 138270-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...