RedHat Security Advisory RHSA-2009:0002

The remote host is missing updates announced in advisory RHSA-2009:0002. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...

RedHat Security Advisory RHSA-2009:0011

The remote host is missing updates announced in advisory RHSA-2009:0011. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple insufficient input validation flaws were discovered in LittleCMS. An attacker could...

RedHat Security Advisory RHSA-2009:0005

The remote host is missing updates announced in advisory RHSA-2009:0005. GNOME VFS is the GNOME virtual file system. It provides a modular architecture and ships with several modules that implement support for various local and remote file systems as well as numerous protocols, including HTTP, FT...

RedHat Security Advisory RHSA-2009:0003

The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...

RedHat Security Advisory RHSA-2009:0008

The remote host is missing updates announced in advisory RHSA-2009:0008. D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility. A denial-of-service flaw was discovered in the system for...

RedHat Security Advisory RHSA-2009:0011

The remote host is missing updates announced in advisory RHSA-2009:0011. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple insufficient input validation flaws were discovered in LittleCMS. An attacker could...

RedHat Security Advisory RHSA-2009:0004

The remote host is missing updates announced in advisory RHSA-2009:0004. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength, general purpose, cryptography library. The Google security team discovered a flaw ...

RedHat Security Advisory RHSA-2009:0002

The remote host is missing updates announced in advisory RHSA-2009:0002. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...

Ruby resolv.rb可预测事件ID和源端口DNS欺骗漏洞

BUGTRAQ ID: 31699 CVECAN ID: CVE-2008-3905 Ruby是一种功能强大的面向对象的脚本语言。 Ruby的resolv.rb对DNS请求使用了固定的源端口和顺序排列的事件ID，这允许远程攻击者相对容易的伪造DNS响应，扮演成中间人执行网络钓鱼等各种攻击。 Yukihiro Matsumoto Ruby 1.8.x 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2008:0897-01）以及相应补丁: RHSA-2008:0897-01：Moderate: ruby security update...

PHP 'mbstring扩展缓冲区溢出漏洞

BUGTRAQ ID: 32948 CVE ID：CVE-2008-5557 PHP是一款网络编程语言。 PHP mbstring扩展存在输入验证错误，远程攻击者可以利用漏洞使应用程序崩溃。 mbstring扩展用于处理多字节unicode字符串，在解码部分HTML实体为unicode字符串时存在问题，由于解码器不正确处理错误条件，堆分配缓冲区的边界检查可被有效的绕过。攻击者利用漏洞可传送任意数据到堆特定域而以应用程序权限执行任意指令。 PHP PHP 5.2.6 PHP PHP 5.2.5 PHP PHP 5.2.4 PHP PHP 5.2.3 PHP PHP 5.2.2 PHP PH...

CUPS cupsd RSS订阅空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 32419 CVECAN ID: CVE-2008-5183 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 如果向默认监听于631/tcp端口的CUPS守护程序（/usr/sbin/cupsd）添加了多于100个RSS订阅的话，就会触发空指针引用，导致守护程序崩溃。 Easy Software Products CUPS 1.3.8 RedHat ------...

Adobe Flash Player for Linux SWF文件处理代码执行漏洞

BUGTRAQ ID: 32896 CVECAN ID: CVE-2008-5499 Flash Player是一款非常流行的FLASH播放器。 Flash Player实现上存在漏洞，如果使用Linux版本的Adobe Flash Player打开了特制的SWF文件的话，就可能导致在用户系统上执行任意代码。 Adobe Flash Player for Linux 9.x Adobe Flash Player for Linux 10.x Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Fedora 9 : rsyslog-3.20.2-2.fc9 (2008-11538)

Security fixes for CVE-2008-5617 and CVE-2008-5618, detailed in: http://www.rsyslog.com/Article322.phtml http://secunia.com/Advisories/32857/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Sun Java JDK/JRE安全更新修复多个漏洞

BUGTRAQ ID: 32620,32608 CVECAN ID:...

IPsec-Tools多个远程拒绝服务漏洞

BUGTRAQ ID: 30657 CVECAN ID: CVE-2008-3651,CVE-2008-3652 IPsec-Tools是KAME的IPsec工具到Linux平台上的移植。 ipsec-tools的racoon守护进程的src/racoon/handler.c文件没有删除远程初始化的孤儿ph1句柄，racoon/proposal.c文件中存在内存泄露漏洞。如果远程攻击者发送了无效请求报文的话，就可能导致耗尽所有可用内存。 IPsec-Tools 0.7.1 RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2008:0849-01）以及相应补丁...

twiki -- multiple vulnerabilities

Marc Schoenefeld and Steve Milner of RedHat SRT and Peter Allor of IBM ISS report: XSS vulnerability with URLPARAM variable SEARCH variable allows arbitrary shell command execution...

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

Description Sun Java Runtime Environment and Java Development Kit are prone to multiple security vulnerabilities. Successful exploits may allow attackers to violate the same-origin policy, obtain sensitive information, bypass security restrictions, run untrusted applets with elevated privileges,...

Cobbler Web接口kickstat模板远程特权权限漏洞

BUGTRAQ ID: 32317 CNCAN ID：CNCAN-2008112101 Cobbler是一款网络安全服务器。 Cobbler WEB接口存在远程特权提升问题，远程攻击者可以利用漏洞以root特权执行python代码。 问题存在于kickstart模板存在安全问题，目前没有详细漏洞细节提供。 RedHat Fedora 9 RedHat Fedora 8 Cobbler Cobbler 1.2.8 升级程序： Cobbler Cobbler 1.2.8 1 Cobbler cobbler-1.2.9.tar.gz...

Vim多个插件字符转义任意命令执行漏洞

BUGTRAQ ID: 32462,32463 CVECAN ID: CVE-2008-3074,CVE-2008-3074 VIM是一款免费开放源代码文本编辑器，可使用在Unix/Linux操作系统下。 VIM的tar.vim和zip.vim插件中shellescape函数没有正确地转义所有项（“!”字符）。如果用户使用tar.vim插件打开了TAR文档的话，就会导致以运行Vim用户的权限执行任意指令。 VIM Development Group VIM 7.1 VIM Development Group VIM 7.0 RedHat ------...

RHEL 5 : vim (RHSA-2008:0580)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0580 advisory. - vim format string flaw CVE-2007-2953 - vim: command execution via scripts not sanitizing inputs to execute and system CVE-2008-2712 - Vim...