FreeBSD-SA-09:14.devfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:14.devfs Security Advisory The FreeBSD Project Topic: Devfs / VFS NULL pointer race condition Category: core Module: kern Announced: 2009-10-02 Credits:...

[security bulletin] HPSBUX02457 SSRT090174 rev.1 - HP-UX Running Role-Based Access Control (RBAC), Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01866178 Version: 1 HPSBUX02457 SSRT090174 rev.1 - HP-UX Running Role-Based Access Control RBAC, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon a...

[security bulletin] HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager (NNM) Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01817357 Version: 1 HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager NNM Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service DoS NOTICE: The information ...

About the security content of Security Update 2009-003 / Mac OS X v10.5.8

About the security content of Security Update 2009-003 / Mac OS X v10.5.8 Last Modified: August 05, 2009 Article: HT3757 Summary This document describes the security content of Security Update 2009-003 / Mac OS X v10.5.8, which can be downloaded and installed via Software Update preferences, or...

Jon Callas on PGP, Crypto History and Cloud Security

Dennis Fisher talks with Jon Callas, CTO of PGP, about the history of cryptography, the evolution of PGP itself and the future of cloud security. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of sykboy65...

PGP Desktop Local Denial of Service Vulnerability

This host has PGP Desktop is installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbpgpdesktoplocaldosvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ PGP Desktop Local Denial of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone...

[security bulletin] HPSBMA02422 SSRT080146 rev.1 - HP StorageWorks Storage Mirroring, Remote Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01707538 Version: 1 HPSBMA02422 SSRT080146 rev.1 - HP StorageWorks Storage Mirroring, Remote Execution of Arbitrary Code, Denial of Service DoS, Unauthorized Access NOTICE: The information in thi...

PGP Desktop Local Denial of Service Vulnerability

PGP Desktop is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

PGP Desktop before 9.10 allows local users to 1 cause a denial of service crash via a crafted IOCTL request to pgpdisk.sys, and 2 cause a denial of service crash and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys...

CVE-2009-0681

PGP Desktop before 9.10 allows local users to 1 cause a denial of service crash via a crafted IOCTL request to pgpdisk.sys, and 2 cause a denial of service crash and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys...

CVE-2009-0681

PGP Desktop before 9.10 allows local users to 1 cause a denial of service crash via a crafted IOCTL request to pgpdisk.sys, and 2 cause a denial of service crash and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys...

CVE-2009-0681

PGP Desktop before 9.10 is affected by local DoS and code execution vulnerabilities in two IOCTL handlers. Specifically, pgpdisk.sys and pgpwded.sys fail to properly validate Irp/buffer data, allowing local attackers to crash the system or, for pgpwded.sys, crash or execute arbitrary code with SY...

PGP Desktop < 9.10 Multiple Local DoS

The version of PGP Desktop installed on the remote system is older than 9.10. As such, it reportedly is affected by the following issues : - The IOCTL handler in 'pgpdisk.sys' fails to perform sufficient boundary checks on data associated with 'Irp' objects. A local attacker could exploit this fl...

[Positive Technologies SA 2009-01] PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities

---------------------------------------------------------------------- PT-2009-01 Positive Technologies Security Advisory PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software PGP Desktop 9.9.0...

PGP Desktop privilege escalation

Multiple vulnerabilities on IOCTL processing...

IBM DB2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi. IBM DB2 Version 9.5 Fix Pack 3a came out, fixing also two DoS vulnerabilities I found. http://www-01.ibm.com/support/docview.wss?uid=swg21372517IBM DB2 1. "IZ37697: SECURITY: MALICIOUS CONNECT DATA STREAM CAN CAUSE DENIAL OF SERVICE." First is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 smime.php, 2 pgp.php, and 3 message.php...

CVE-2009-0930

Multiple cross-site scripting XSS vulnerabilities in Horde IMP before 4.2.2 and 4.3.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 smime.php, 2 pgp.php, and 3 message.php...

[security bulletin] HPSBMA02412 SSRT080040 rev.1 - WMI Mapper for HP Systems Insight Manager Running on Windows, Remote Unauthorized Access to Data, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01655638 Version: 1 HPSBMA02412 SSRT080040 rev.1 - WMI Mapper for HP Systems Insight Manager Running on Windows, Remote Unauthorized Access to Data, Local Unauthorized Access NOTICE: The...

FreeBSD telnetd守护程序远程代码执行漏洞

BUGTRAQ ID: 33777 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 telnet协议允许传送telnet通讯中的环境变量并分配给tcp连接的另一端。FreeBSD的telnet守护程序在执行/bin/login之前没有检查LD 如LDPRELOAD环境变量，因此攻击者可以在传送的环境变量中包含LDPRELOAD标识和文件系统上带有恶意代码的预编译库值。在以用户id和组id 0（root）执行/bin/login时，就会通过telnet环境定义预加载远程连接所设置的库并执行。...