RHEL 4 : bind (RHSA-2010:1000)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:1000 advisory. - bind: failure to clear existing RRSIG records when a NO DATA is negatively cached could DoS named CVE-2010-3613 Note that Nessus has not tested for...

Linux Kernel 'drivers/scsi/gdth.c' IOCTL本地特权提升漏洞

Bugtraq ID: 44648 CVE ID：CVE-2010-4157 CNCVE ID：CNCVE-20104157 Linux是一款开放源代码的操作系统。 gdthioctlalloc接收整数类型大小变量，copyfromuser接收无符长整型大小变量。gen.datalen和gen.senselen为符长整型，在x8664上长型为64位，整数为32位。 传递超大值，内存分配会截断大小为32位而分配较小的缓冲区，在copyfromuser函数中可触发内存破坏。 RedHat Enterprise MRG v1 for Red Hat Enterprise Linux versi...

RHEL 6 : openssl (RHSA-2010:0979)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0979 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a full-strength,...

Exim 4.63 Remote Root Exploit

Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as "trojanurl" and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; $ARGC=@ARGV; if $ARGC!=2 print "Usage: $0 Host Port \n\n"; die "Ex: $0...

Exim 4.63 - Remote Command Execution

Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as "trojanurl" and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; $ARGC=@ARGV; if $ARGC!=2 print "Usage: $0 Host Port \n\n"; die "Ex: $0...

Exim 4.63 Remote Root Exploit

Exploit for linux platform in category remote exploits Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as "trojanurl" and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; email protected; ...

seamonkey security update

1.0.9-66.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-66.el4 - Added fixes from 1.9.1.16...

CVE-2010-3880

net/ipv4/inetdiag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INETDIAG bytecode, which allows local users to cause a denial of service kernel infinite loop via crafted INETDIAGREQBYTECODE instructions in a netlink message that contains multiple attribute elements, as...

Linux Kernel 2.6.37 (RedHat Ubuntu 10.04) - Full-Nelson.c Local Privilege Escalation

Linux Kernel 2.6.37 RedHat Ubuntu 10.04 - Full-Nelson.c Local Privilege Escalation / Linux Kernel = 2.6.37 local privilege escalation by Dan Rosenberg @djrbliss on twitter Usage: gcc full-nelson.c -o full-nelson ./full-nelson This exploit leverages three vulnerabilities to get root, all of which...

RHEL 5 : java-1.4.2-ibm (RHSA-2010:0935)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0935 advisory. - krb5: null pointer dereference in GSS-API library leads to DoS MITKRB5-SA-2010-005 CVE-2010-1321 - OpenJDK HttpURLConnection incomplete...

RHEL 6 : wireshark (RHSA-2010:0924)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0924 advisory. - wireshark: stack overflow in BER dissector CVE-2010-3445 - Wireshark: Heap-based buffer overflow in LDSS dissector CVE-2010-4300 Note that...

CVE-2010-4172

Multiple cross-site scripting XSS vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 orderBy or 2 sort parameter to sessionsList.jsp, or unspecified input to 3...

RHEL 6 : krb5 (RHSA-2010:0863)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0863 advisory. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted...

RHEL 6 : pidgin (RHSA-2010:0890)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0890 advisory. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Multiple NULL...

RHEL 6 : flash-plugin (RHSA-2010:0867)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0867 advisory. - flash-plugin: security bulletin APSB10-26 CVE-2010-3636, CVE-2010-3639, CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643,...

RHEL 6 : freetype (RHSA-2010:0889)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0889 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs...

Fedora 12 : pidgin-2.7.5-1.fc12 (2010-17130)

New release 2.7.5 Full Upstream ChangeLog : - http://developer.pidgin.im/wiki/ChangeLogversion2.7.410 202010 - http://developer.pidgin.im/wiki/ChangeLogversion2.7.5 10312010 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 14 : cvs-1.11.23-11.fc14 (2010-16721)

Thu Oct 21 2010 Petr Pisar - 1.11.23-11 - Fix CVE-2010-3846 bug 645386 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

RedHat Update for xulrunner RHSA-2010:0809-01

Check for the Version of xulrunner OpenVAS Vulnerability Test RedHat Update for xulrunner RHSA-2010:0809-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Adobe Flash Player CVE-2010-3648 Remote Memory Corruption Vulnerability

Description Adobe Flash Player is prone to a remote memory corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. NOTE: This iss...