CVE-2010-1187

The Transparent Inter-Process Communication TIPC functionality in Linux kernel 2.6.16-rc1 through 2.6.33, and possibly other versions, allows local users to cause a denial of service kernel OOPS by sending datagrams through AFTIPC before entering network mode, which triggers a NULL pointer...

RedHat Update for nss RHSA-2010:0165-01

Check for the Version of nss OpenVAS Vulnerability Test RedHat Update for nss RHSA-2010:0165-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RedHat Update for openssl RHSA-2010:0163-01

Check for the Version of openssl OpenVAS Vulnerability Test RedHat Update for openssl RHSA-2010:0163-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Oracle Java SE and Java for Business CVE-2010-0094 Remote Java Runtime Environment Vulnerability

Description Oracle Java SE and Java for Business are prone to a remote vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. An attacker does not require privileges to exploit this vulnerability. This vulnerability affects the following supported...

Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability

Description Oracle Java SE and Java for Business are prone to a remote code-execution vulnerability affecting the 'Sound' component. Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result...

thunderbird security update

CentOS Errata and Security Advisory CESA-2010:0153 An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...

[security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01762443 Version: 1 HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center PPMC, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin should be act...

Linux kernel 2.6.x KVM超大SMP指令本地拒绝服务漏洞

BUGTRAQ ID: 37130 CVE ID: CVE-2009-4031 Linux Kernel是开放源码操作系统Linux所使用的内核。 在x86平台上，x86模拟器上的arch/x86/kvm/emulate.c文件的doinsnfetch函数没有限制每次指令可获取的指令字节数。guest操作系统中的用户可以利用这个漏洞在SMP主机上造成很大的延迟，导致主机操作系统上本地拒绝服务。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RedHat Update for thunderbird RHSA-2010:0154-02

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2010:0154-02 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RedHat Update for tar RHSA-2010:0141-01

Check for the Version of tar OpenVAS Vulnerability Test RedHat Update for tar RHSA-2010:0141-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RedHat Update for thunderbird RHSA-2010:0154-02

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2010:0154-02 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Linux Kernel SCTP实现远程拒绝服务漏洞

CVECAN ID: CVE-2010-0008 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的流控制传输协议（SCTP）实现的sctprcvootb函数中存在空指针引用错误。远程攻击者可以通过向目标系统发送特制的 SCTP报文来触发这个漏洞，导致拒绝服务的情况。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Linux Kernel ip6_dst_lookup_tail()函数远程拒绝服务漏洞

CVECAN ID: CVE-2010-0437 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的ip6dstlookuptail函数中存在空指针引用漏洞。本地网络上的攻击者可以通过向目标系统发送IPv6通讯来触发这个漏洞，如果接收到IPv6报文时目标系统上dst-neighbour为空，就会导致系统崩溃 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-0734

contentencoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service application crash or have unspecified othe...

Mozilla Firefox Floating Point Conversion Heap Overflow Vulnerability

Exploit for unknown platform in category remote exploits ===================================================================== Mozilla Firefox Floating Point Conversion Heap Overflow Vulnerability ===================================================================== Vulnerable: VMWare vMA 4.0...

Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ======================================================================= Linux Kernel 'fasynchelper' Local Privilege Escalation Vulnerability ======================================================================= Credit: Tavis Ormandy...

Linux Kernel 'net/ipv6/ip6_output.c' NULL Pointer Dereference DoS

Exploit for linux platform in category dos / poc ================================================================= Linux Kernel 'net/ipv6/ip6output.c' NULL Pointer Dereference DoS ================================================================= Credit: Remi Denis-Courmont Vulnerable: RedHat...

Microworld eScan AntiVirus 3.x - Remote Code Execution

Microworld eScan AntiVirus 3.x - Remote Code Execution !/usr/bin/env python import sys from socket import auther: Mohammed almutairi [email protected] """ MicroWorld eScan Antivirus 1 if $POST'forgot' == "Send Password" $user = $POST"uname"; 2 insecure: vulnerable code in forgotpassword.php a...

Todd Miller Sudo 'sudoedit' Local Privilege Escalation Vulnerability

Exploit for unknown platform in category local exploits ==================================================================== Todd Miller Sudo 'sudoedit' Local Privilege Escalation Vulnerability ==================================================================== Vulnerable: Ubuntu Ubuntu Linux 9....

Linux Kernel 64bit Personality Handling Local DoS Vulnerability

Exploit for linux platform in category dos / poc ============================================================================= Linux Kernel 64bit Personality Handling Local Denial of Service Vulnerability ============================================================================= Vulnerable:...