Mozilla Firefox SJOW方式权限提升漏洞

BUGTRAQ ID: 41868 CVE ID: CVE-2010-1215 Firefox是一款流行的开源WEB浏览器。 当运行在chrome环境中的内容脚本通过SJOW方式访问内容对象时，内容代码可以获得对chrome中对象的访问，并使用该对象以chrome权限执行任意JavaScript。 Mozilla Firefox 3.6.x Mozilla Thunderbird 3.1.x 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/ RedHat ------...

Mozilla Firefox <canvas>元素跨域信息泄露漏洞

BUGTRAQ ID: 41878 CVE ID: CVE-2010-1207 Firefox是一款流行的开源WEB浏览器。 攻击者可以利用canvas元素破坏同源策略读取其他站点的数据。尽管对canvas元素设置了读限制，但可通过保持对元素上下文的引用并从DOM删除相关的canvas节点绕过上述限制。 Mozilla Firefox 3.6.x Mozilla Thunderbird 3.1.x 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/ RedHat ------...

Mozilla Firefox importScripts()方式跨域信息泄露漏洞

BUGTRAQ ID: 41871 CVE ID: CVE-2010-1213 Firefox是一款流行的开源WEB浏览器。 即使内容不是有效的JavaScript，Web Worker方式importScripts也会从其他域读取和解析资源。这破坏了同源策略，可能允许攻击者从其他站点窃取敏感信息。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla Thunderbird 3.1.x Mozilla Thunderbird 3.0.x Mozilla SeaMonkey 2.0.6 厂商补丁： Mozilla -------...

Firefox CSS选择器跨域信息泄露漏洞

BUGTRAQ ID: 41872 CVE ID: CVE-2010-0654 Firefox是一款流行的开源WEB浏览器。 如果攻击者能够向目标页的A和B两点之间注入CSS选择器的开放和关闭部分，用户就可以通过getComputedStyle API读取两个注入点之间的部分。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla Thunderbird 3.1.x Mozilla Thunderbird 3.0.x Mozilla SeaMonkey 2.0.6 厂商补丁： Mozilla -------...

Mozilla Firefox 3.6.7 插件参数引用悬停指针漏洞

BUGTRAQ ID: 41933 CVE ID: CVE-2010-2755 Firefox是一款非常流行的开源WEB浏览器。 Firefox的插件处理器中存在无效释放漏洞，在某些情况下可能过早的释放插件例程参数数组中的属性，留下插件可执行的悬停指针，可能会调用攻击者所控制的内存。 用户受骗访问恶意的web内容可能导致释放无效的内存指针，Firefox可能会崩溃或以运行Firefox用户的权限执行任意代码。 Mozilla Firefox 3.6.7 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Mozilla Firefox字符映射错误显示漏洞

BUGTRAQ ID: 41866 CVE ID: CVE-2010-1210 Firefox是一款流行的开源WEB浏览器。 一些8位编码包含有未定义的位置，映射到了U+FFFD。在显示的时候，可能不会显示紧随之后的字符。例如，windows-1253中的 '\xD1', '\xD2', '\xD3', 'xD4'序列应为U+3A1, U+FFFD, U+3A3, U+3A4（也就是字符串ΡΣΤ），但实际结果为U+3A1, U+FFFD, U+3A4，缺少了U+3A3字符（也就是ΡΤ字符串，缺少Σ）。 在某些站点上这可能导致跨站脚本问题，因为服务器上过滤掉了某些应显示的字符。 Mozil...

Mozilla Firefox出错消息脚本文件名信息泄露漏洞

BUGTRAQ ID: 41860 CVE ID: CVE-2010-2754 Firefox是一款流行的开源WEB浏览器。 Firefox中的脚本出错处理方式会显示错误的来源，其中可能包含有敏感信息。假设 http://SampleSite.com/admin.asp 页面使用了以下逻辑： 1- 如果用户没有登录，重新定向到登录页面。 2- 如果用户不是管理员，重新定向到拒绝访问页面。 3- 如果用户为管理员，显示管理员菜单。 攻击者可以使用跨站URL劫持技术确认用户在SampleSite.com所处的状态，并继续执行有针对性的攻击。 Mozilla Firefox 3.6.x...

RedHat Update for firefox RHSA-2010:0558-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2010:0558-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

seamonkey security update

CentOS Errata and Security Advisory CESA-2010:0499 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...

Samba 2.2.8 (Linux x86) - 'trans2open' Remote Overflow (Metasploit)

$Id: trans2open.rb 9828 2010-07-14 17:27:23Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Fedora 12 : rpm-4.7.2-2.fc12 (2010-10617)

Wed Jun 30 2010 Panu Matilainen - 4.7.2-2 - Fix CVE-2010-2059 598775 and CVE-2010-2198 601955 - Tue Dec 8 2009 Panu Matilainen - 4.7.2-1 - update to 4.7.2 http://rpm.org/wiki/Releases/4.7.2 - fix posix chmod test to unbreak %fixperms macro 543035 - avoid looking into OpenPGP subkeys 436812 - dont...

LPRng - use_syslog Remote Format String (Metasploit)

$Id: lprngformatstring.rb 9666 2010-07-03 01:09:32Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Salim Gasmi GLD (Greylisting Daemon) - Postfix Buffer Overflow (Metasploit)

$Id: gldpostfix.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Fedora 12 : squid-3.1.0.16-6.fc12 (2010-3064)

Denial of service issue in HTCP processing SQUID-2010:2 http://www.squid- cache.org/Advisories/SQUID-20102.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 12 : sssd-1.0.1-1.fc12 (2010-0413)

Fixes CVE-2010-0014 - SSSD accepts any password when offline with a valid TGT available Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 12 : sendmail-8.14.4-3.fc12 (2010-5470)

This new version of sendmail fixes security bug - handling of bogus certificates with NULLs in CNs. Also many other bugs have been fixed, for complete list please see: http://www.sendmail.org/releases/8.14.4 Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 11 : nss-3.12.6-1.2.fc11 (2010-3905)

Update to NSS 3.12.6 The primary feature of NSS 3.12.6 is support for the TLS Renegotiation Indication Extension, RFC 5746. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 12 : chrony-1.23-8.20081106gitbe42b4.fc12 (2010-1539)

This update fixes several vulnerabilities that can be exploited for a remote denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possib...

Fedora 12 : nss-3.12.6-1.2.fc12 (2010-3956)

Update to NSS 3.12.6 The primary feature of NSS 3.12.6 is support for the TLS Renegotiation Indication Extension, RFC 5746. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

RedHat JBoss Enterprise JMX Console Authentication Bypass (CVE-2010-0738)

JBoss Application Server JBoss AS is a free software and open-source Java EE-based application server. An authentication bypass vulnerability has been reported in JBoss Enterprise Application Platform JMX Console application. The vulnerability is due to the authentication policy within the...