RedHat Update for samba and samba3x RHSA-2010:0488-01

Check for the Version of samba and samba3x OpenVAS Vulnerability Test RedHat Update for samba and samba3x RHSA-2010:0488-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Perl Safe模块对象引用绕过安全限制漏洞

BUGTRAQ ID: 40302 CVECAN ID: CVE-2010-1168,CVE-2010-1974 Perl是一种免费且功能强大的编程语言。 Perl中所使用的Safe模块没有正确地对经过隐式bless处理的对象限制DESTROY和AUTOLOAD等方式的代码，在访问或释放这些对象时 Safe可能未加限制的执行这些方式。在Safe隔离中所执行的特制Perl脚本可以利用这个漏洞绕过预期的Safe模块限制。 Perl 5.12.1 厂商补丁： Larry Wall ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RedHat JBoss Enterprise Application Platform JMX Console Authentication Bypass

Added: 06/07/2010 CVE: CVE-2010-0738 BID: 39710 OSVDB: 64171 Background JBoss Application Server AS is a full-featured open source Java application server that includes full support for J2EE-based APIs. JBoss AS runs on numerous operating systems e.g., Linux, FreeBSD, Mac OS X, and Microsoft...

RedHat JBoss Enterprise Application Platform JMX Console Authentication Bypass

Added: 06/07/2010 CVE: CVE-2010-0738 BID: 39710 OSVDB: 64171 Background JBoss Application Server AS is a full-featured open source Java application server that includes full support for J2EE-based APIs. JBoss AS runs on numerous operating systems e.g., Linux, FreeBSD, Mac OS X, and Microsoft...

RedHat JBoss Enterprise Application Platform JMX Console Authentication Bypass

Added: 06/07/2010 CVE: CVE-2010-0738 BID: 39710 OSVDB: 64171 Background JBoss Application Server AS is a full-featured open source Java application server that includes full support for J2EE-based APIs. JBoss AS runs on numerous operating systems e.g., Linux, FreeBSD, Mac OS X, and Microsoft...

CVE-2010-1633

RSA verification recovery in the EVPPKEYverifyrecover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive...

RedHat Update for postgresql RHSA-2010:0427-01

Check for the Version of postgresql OpenVAS Vulnerability Test RedHat Update for postgresql RHSA-2010:0427-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for postgresql RHSA-2010:0428-01

Check for the Version of postgresql OpenVAS Vulnerability Test RedHat Update for postgresql RHSA-2010:0428-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for postgresql RHSA-2010:0428-01

Check for the Version of postgresql OpenVAS Vulnerability Test RedHat Update for postgresql RHSA-2010:0428-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

MIT Kerberos GSS-API校验和空指针引用拒绝服务漏洞

BUGTRAQ ID: 40235 CVE ID: CVE-2010-1321 Kerberos是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5是一种常用的开源Kerberos实现。 MIT Kerberos的GSS-API库中存在空指针引用错误，通过认证的远程攻击者可以通过发送缺少校验和字段的特制GSS-API令牌来利用这个漏洞，导致使用GSS-API认证机制的服务器应用崩溃。 MIT Kerberos 5 1.8 MIT Kerberos 5 1.7 MIT Kerberos 5 1.6 厂商补丁： MIT ---...

RHEL 4 : postgresql (RHSA-2010:0428)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0428 advisory. - postgresql: SQL privilege escalation via modifications to session-local state CVE-2009-4136 - postgresql: substring negative length argume...

TeX Live predospecial()函数.dvi文件解析整数溢出漏洞

BUGTRAQ ID: 39500 CVECAN ID: CVE-2010-0739 TeX Live是用于创建TeX排版系统的工具。 TeX Live的dospecial.c文件中的predospecial函数在处理.dvi文件时存在最终可导致堆溢出的整数溢出漏洞。用户受骗打开了畸形的.dvi文件就可以触发这个溢出，导致以运行应用程序用户的权限执行任意代码。 TeX Live 3.0 TeX Live 2008 TeX Live 2007 TeX Live 2.0 TeX Live 1.0 厂商补丁： RedHat ------...

Tex Live dvipng工具数组索引漏洞

BUGTRAQ ID: 39969 CVECAN ID: CVE-2010-0829 dvipng是TeX Live所使用的从DVI文件生成PNG或GIF图形的工具。 dvipng工具中存在多个数组索引错误。在texlive-bin-2007.dfsg.2/build/source/texk/dvipng /draw.c文件中，SetChar函数使用了受dvi文件的创建者控制的索引并将其索引到了数组中。如果越过了数组的边界，攻击者就可以设置指向任意值的指针，导致执行任意代码。...

Tex Live bbdospecial()函数整数溢出漏洞

BUGTRAQ ID: 39966 CVECAN ID: CVE-2010-1440 TeX Live是用于创建TeX排版系统的工具。 TeX Live的dospecial.c文件中的bbdospecial函数中存在最终可导致堆溢出的整数溢出漏洞。用户受骗打开了畸形的.dvi文件就可以触发这个溢出，导致执行任意代码。 TeX Live 2009 TeX Live 2008 TeX Live 2007 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2010:0401-01）以及相应补丁: RHSA-2010:0401-01：Moderate:...

Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability

CVE: CVE-2008-2364 The Apache 'modproxyhttp' module is prone to a denial-of-service vulnerability that affects the processing of interim responses. Attackers may exploit this issue to cause denial-of-service conditions. Reportedly, the issue affects Apache 2.2.8 and 2.0.63; other versions may als...

RHEL 4 / 5 : tar (RHSA-2010:0141)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0141 advisory. - tar/cpio stack crashing in safernamesuffix CVE-2007-4476 - tar, cpio: Heap-based buffer overflow by expanding a specially-crafted...

RHEL 5 : httpd (RHSA-2010:0168)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0168 advisory. - httpd: modproxyajp remote temporary DoS CVE-2010-0408 - httpd: request header information leak CVE-2010-0434 Note that Nessus has not test...

RHEL 5 : openssl (RHSA-2010:0162)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0162 advisory. - openssl: missing bnwexpand return value checks CVE-2009-3245 - TLS: MITM attacks via session renegotiation CVE-2009-3555 - openssl: crash...

JBoss企业应用平台多个非授权访问漏洞

BUGTRAQ ID: 39710 CVE ID: CVE-2010-0738,CVE-2010-1428,CVE-2010-1429 JBoss企业应用平台（EAP）是J2EE应用的中间件平台。 JBoss企业应用平台中存在多个非授权访问漏洞，远程用户可以绕过认证执行非授权操作或读取敏感信息。 1 JMX控制台配置仅对使用GET和POST HTTP命令的请求指定了认证要求，远程攻击者可以创建没有指定GET或POST的HTTP请求，导致无需认证便被默认的GET处理器执行。 2...

CVE-2010-1162

The releaseonetty function in drivers/char/ttyio.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the putpid function, which has unspecified impact and local attack vectors...