postgresql84 security update

CentOS Errata and Security Advisory CESA-2011:1378 Updated postgresql84 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS ba...

RHEL 5 : postgresql84 (RHSA-2011:1378)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1378 advisory. - cryptblowfish: 8-bit character mishandling allows different password pairs to produce the same hash CVE-2011-2483 Note that Nessus has not tested f...

RedHat Update for pidgin RHSA-2011:1371-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Linux Kernel可信数据报套接字（RDS）协议本地整数溢出漏洞

BUGTRAQ ID: 44549 CVE ID: CVE-2010-3865 Linux Kernel是linux 内核，其基础为linux平台，linux为C语言编写的内核，基于此内核又衍生出了具体的Red hat linux 、open suse linux等具体的操作系统，一套基于Linux内核的完整操作系统叫作Linux操作系统，或是GNU/Linux。 Linux Kernel在RDS协议的实现上存在安全漏洞，本地攻击者可利用此漏洞以提升的权限执行任意代码，使受影响内核崩溃。Red Hat Enterprise Linux 3, 4和Red Hat Enterprise...

Samba 'etc/mtab' File Appending Local DoS Vulnerability

Samba is prone to a local denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

RHEL 6 : kdelibs (RHSA-2011:1364)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1364 advisory. The kdelibs packages provide libraries for the K Desktop Environment KDE. An input sanitization flaw was found in the KSSL KDE SSL Wrapper API. An...

X.Org X11本地权限提升和内存泄露漏洞

BUGTRAQ ID: 50002 CVE ID: CVE-2011-4818,CVE-2011-4819 X.Org是X.Org Foundation对X窗口系统的开源实现。 X.Org X11在实现上存在本地权限提升和内存泄露漏洞，远程攻击者可利用这些漏洞以提升的权限执行任意代码，使受影响计算机崩溃或获取敏感信息。 多个GLX X呼叫缺少正确的输入过滤。可访问GLX呼叫的攻击者使X服务器崩溃或在其中执行任意代码 RedHat Enterprise Linux X.org X11R6 6.x X.org X11R6 5.1 X.org X11R6 4.0 X.org X11R7 7.x...

RedHat Update for xorg-x11-server RHSA-2011:1359-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for rpm RHSA-2011:1349-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 / 6 : xorg-x11-server (RHSA-2011:1359)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1359 advisory. - X.org: multiple GLX input sanitization flaws CVE-2010-4818 - X.org: ProcRenderAddGlyphs input sanitization flaw CVE-2010-4819 Note tha...

CVE-2011-2912

Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/loads3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted S3M file with an invalid offset...

RHEL 6 : kernel (RHSA-2011:1350)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1350 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: Flaws...

CVE-2011-2911

Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...

CVE-2011-2915

Off-by-one error in the CSoundFile::ReadAMS2 function in src/loadams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted AMS file with a large number of instruments...

RHEL 6 : thunderbird (RHSA-2011:1342)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1342 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML content. An HTML...

RHEL 4 / 5 / 6 : firefox (RHSA-2011:1341)

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1341 advisory. - Mozilla: Code installation through holding down Enter MFSA 2011-40 CVE-2011-2372 - Mozilla: Miscellaneous memory safety hazards MF...

RHEL 4 : seamonkey (RHSA-2011:1344)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1344 advisory. - Mozilla: Integer underflow when using JavaScript RegExp MFSA 2011-37 CVE-2011-2998 - Mozilla: XSS via plugins and shadowed window.location...

Fedora 15 : qt-4.7.4-2.fc15 (2011-12193)

QtGui Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network Security,...

NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux

Vulnerable SUID script in nomachine NX Server for Linux 3.5.0-4 Advanced and Enterprise across redhat and debian hosts 21 September 2011 NGS Secure has discovered a High risk vulnerability in nomachine NX Server for Linux 3.5.0-4 Advanced and Enterprise across redhat and debian hosts. Impact:...

RedHat Update for pango RHSA-2011:1326-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...