HP-UX PHKL_28025 : HP-UX Running Portable File System (PFS), Remote Increase in Privilege (HPSBUX02203 SSRT071339 rev.1)

s700800 11.11 Rock Ridge extension for ISO-9660 : A potential security vulnerability has been identified in HP-UX with the Portable File System PFS. The vulnerability could be exploited remotely to gain an increase in privilege. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

[SECURITY] Fedora Core 6 Update: cups-1.2.12-4.fc6

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

xpdf integer overflow

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in 1 poppler before 0.5.91, 2 gpdf before 2.8.2, 3 kpdf, 4 kdegraphics, 5 CUPS, 6 PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a...

Stack overflow

Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 English Trial, and 2.0 with Portable Executable Viewer 1.00 English Trial, allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file...

CVE-2007-3314

Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 English Trial, and 2.0 with Portable Executable Viewer 1.00 English Trial, allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file...

CVE-2007-3314

CVE-2007-3314 describes a stack-based overflow in Altap Servant Salamander 2.5 (peviewer.spl) and related PE Viewer components that can be triggered by a crafted PE file, allowing a remote attacker to execute arbitrary code. The vulnerability is caused by processing a long PDB debug filename and ...

Moderate: Red Hat Security Advisory: freetype security update

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw...

DEBIAN-CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

Moderate: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functions for creating and manipulating PNG Portable Netwo...

DEBIAN-CVE-2007-2445

The pnghandletRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service application crash via a grayscale PNG image with a bad tRNS chunk CRC value...

SOL6804 - ClamAV Portable Executable heap overflow Vulnerability - CVE-2006-4182

The FirePass controller provides anti-virus scanning of files uploaded through Portal Access from the ClamAV open source software . Scanning is enabled by selecting the Enable Standalone Virus Scanner option button on the Antivirus tab of the Portal Access: Content Inspection page. A vulnerabilit...

DEBIAN-CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

OpenSSH S/Key远程信息泄露漏洞

OpenSSH是一款流行的加密安全shell应用实现。 在使用S/KEY的情况下OpenSSH存在信息泄露问题，远程攻击者可以利用漏洞获得系统帐户的敏感信息。 如果"ChallengeResponseAuthentication"设置为"Yes"默认设置，SH允许用户通过使用'ssh userid:skey at hostname'形式的S/KEY登录，一般的SSH行为如： =============================================================================== alucard $ ssh user at...

[security bulletin] HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System (PFS), Remote Increase in Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00913684 Version: 1 HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System PFS, Remote Increase in Privilege NOTICE: The information in this Security Bulletin should be acted upon as...

Design/Logic Flaw

The Remote Play feature in Sony Playstation 3 PS3 1.60 and Playstation Portable PSP 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets...

CVE-2007-1728

The Remote Play feature in Sony Playstation 3 PS3 1.60 and Playstation Portable PSP 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets...

CVE-2007-1728

The CVE-2007-1728 entry concerns Sony PlayStation 3 (firmware 1.60) and PlayStation Portable (firmware 3.10 OE-A). The vulnerability arises from the Remote Play feature, where remote attackers can trigger a denial-of-service by flooding the affected device with UDP datagrams. The documents explic...

CVE-2007-1199

Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with , a different issue than CVE-2007-0045...

JVN#93700808 Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone

Impact An arbitrary script could be executed in an inappropriate security zone. Solution Products Affected Sleipnir 2.49 and earlier Portable Sleipnir 2.45 and earlier RSS bar for Sleipnir 1.28 Release3 and earlier...