RHEL 4 : xpdf (RHSA-2009:1680)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1680 advisory. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflo...

seamonkey security update

1.0.9-51.0.1.el48 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and removed corresponding RedHat ones 1.0.9-51.el4 - Added fixes from 1.9.0.16...

RedHat Security Advisory RHSA-2009:1646

The remote host is missing updates announced in advisory RHSA-2009:1646. GNU Libtool is a set of shell scripts which automatically configure UNIX, Linux, and similar operating systems to generically build shared libraries. A flaw was found in the way GNU Libtool's libltdl library looked for modul...

JBoss企业应用平台多个安全漏洞

BUGTRAQ ID: 37276 CVE ID: CVE-2009-1380,CVE-2009-2405,CVE-2009-3554 JBoss企业应用平台（EAP）是J2EE应用的中间件平台。 JBoss的实现上存在多个安全漏洞，包括多个跨站脚本问题和一个本地信息泄露问题，远程攻击者可能利用此漏洞来窃取信息。 RedHat JBoss EAP 厂商补丁： RedHat ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.jboss.org/...

RedHat Security Advisory RHSA-2009:1658

The remote host is missing updates announced in advisory RHSA-2009:1658. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these fla...

Adobe Reader and Acrobat 'newplayer()' JavaScript Method Remote Code Execution Vulnerability

Description Adobe Reader and Acrobat are prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions. This issue affects Reader and Acrobat 9.2 and prior versions. Technologies...

RedHat Security Advisory RHSA-2009:1657

The remote host is missing updates announced in advisory RHSA-2009:1657. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these fla...

RedHat Security Advisory RHSA-2009:1659

The remote host is missing updates announced in advisory RHSA-2009:1659. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. On x86 platforms, the doinsnfet...

RedHat Security Advisory RHSA-2009:1648

The remote host is missing updates announced in advisory RHSA-2009:1648. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time source. Robin Park and Dmitri Vinokurov discovered a flaw in the way ntpd handled certain malformed NTP packets. ntpd logged...

RedHat Security Advisory RHSA-2009:1651

The remote host is missing updates announced in advisory RHSA-2009:1651. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time source. Robin Park and Dmitri Vinokurov discovered a flaw in the way ntpd handled certain malformed NTP packets. ntpd logged...

RedHat Security Advisory RHSA-2009:1648

The remote host is missing updates announced in advisory RHSA-2009:1648. The Network Time Protocol NTP is used to synchronize a computer SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

RedHat Security Advisory RHSA-2009:1657

The remote host is missing updates announced in advisory RHSA-2009:1657. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these fla...

RedHat Security Advisory RHSA-2009:1651

The remote host is missing updates announced in advisory RHSA-2009:1651. The Network Time Protocol NTP is used to synchronize a computer SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Adobe Flash Player ActionScript异常处理器整数溢出漏洞

BUGTRAQ ID: 37267 CVE ID: CVE-2009-3799 Flash Player是一款非常流行的FLASH播放器。 Flash Player在生成ActionScript异常处理器期间过大的exceptioncount值会在Verifier::parseExceptionHandlers函数中触发整数溢出，导致以当前登录用户的权限执行任意代码。 Adobe Flash Player 10.x Adobe AIR 1.5.2 厂商补丁： Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Dstat sys.path搜索路径本地权限提升漏洞

BUGTRAQ ID: 37131 CVECAN ID: CVE-2009-3894,CVE-2009-4081 Dstat是vmstat、iostat和netstat工具的多功能替代品，可用于性能调节测试、基准和故障排除等方面。 dstat在sys.path中包含有当前工作目录和profile子目录。如果本地用户在攻击者可写的目录（如/tmp）中运行了dstat且攻击者在该目录中放置了某些Python模块（如getopt.py），就可以导致以运行dstat用户的权限执行任意代码。 Dag Wiers dstat 0.6.9 厂商补丁： RedHat ------...

Adobe Flash Player JPEG解析堆溢出漏洞

BUGTRAQ ID: 37266 CVE ID: CVE-2009-3794 Flash Player是一款非常流行的FLASH播放器。 Flash Player在解析SWF文件中所包含的JPEG维度时计算图形的帧大小缺少过滤检查，用户受骗打开恶意的JPEG图形就可以触发堆溢出，导致执行任意代码。 Adobe Flash Player 10.x Adobe AIR 1.5.2 厂商补丁： Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://get.adobe.com/flashplayer/...

RedHat Security Advisory RHSA-2009:1642

The remote host is missing updates announced in advisory RHSA-2009:1642. acpid is a daemon that dispatches ACPI Advanced Configuration and Power Interface events to user-space programs. It was discovered that acpid could create its log file /var/log/acpid with random permissions on some systems. ...

Fedora Core 11 FEDORA-2009-12348 (php-pear-Mail)

The remote host is missing an update to php-pear-Mail announced via advisory FEDORA-2009-12348. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

RedHat Security Advisory RHSA-2009:1635

The remote host is missing updates announced in advisory RHSA-2009:1635. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: a NULL pointer dereference flaw was found in the NFSv4 implementation in the...

Fedora Core 11 FEDORA-2009-12782 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12782. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...