8962 matches found
RedHat Security Advisory RHSA-2009:0429
The remote host is missing updates announced in advisory RHSA-2009:0429. The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating systems. Multiple integer overflow flaws were found in the CUPS JBIG2 decoder. An attacker could create a malicious PDF file that wou...
RedHat Security Advisory RHSA-2009:0427
The remote host is missing updates announced in advisory RHSA-2009:0427. udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram orient...
Xpdf JBIG2处理多个缓冲区溢出和拒绝服务漏洞
BUGTRAQ ID: 34568 CVECAN ID: CVE-2009-0146,CVE-2009-0147,CVE-2009-0166,CVE-2009-0799,CVE-2009-0800,CVE-2009-1179,CVE-2009-1180,CVE-2009-1181,CVE-2009-1182,CVE-2009-1183,CVE-2009-1187,CVE-2009-1188 Xpdf是便携文档格式（PDF）文件的开放源码查看器。...
RedHat Security Advisory RHSA-2009:0350
The remote host is missing updates announced in advisory RHSA-2009:0350. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP's mbstring extension. A remote attacker able to pass arbitrary input to a PHP scrip...
RedHat Security Advisory RHSA-2009:0410
The remote host is missing updates announced in advisory RHSA-2009:0410. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center KDC. An input validation flaw was...
RedHat Security Advisory RHSA-2009:0338
The remote host is missing updates announced in advisory RHSA-2009:0338. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted...
udev Netlink Message Validation Local Privilege Escalation Vulnerability
Description The 'udev' Linux application is prone to a local privilege-escalation vulnerability because it fails to properly handle netlink messages. Local attackers may exploit this issue to gain elevated privileges, which may lead to a complete compromise of the system. Versions prior to udev 1...
RedHat Security Advisory RHSA-2009:0338
The remote host is missing updates announced in advisory RHSA-2009:0338. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP's mbstring extension. A remote attacker able to pass arbitrary input to a PHP scrip...
RedHat Security Advisory RHSA-2009:0411
The remote host is missing updates announced in advisory RHSA-2009:0411. The device-mapper multipath packages provide tools to manage multipath devices by issuing instructions to the device-mapper multipath kernel module, and by managing the creation and removal of partitions for device-mapper...
RedHat Security Advisory RHSA-2009:0420
The remote host is missing updates announced in advisory RHSA-2009:0420. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...
RedHat Security Advisory RHSA-2009:0409
The remote host is missing updates announced in advisory RHSA-2009:0409. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center KDC. An input validation flaw was...
RedHat Security Advisory RHSA-2009:0377
The remote host is missing updates announced in advisory RHSA-2009:0377. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. The Java Runtime Environment JRE contains the software and tools that users need to run applications written using the...
RedHat Security Advisory RHSA-2009:0411
The remote host is missing updates announced in advisory RHSA-2009:0411. The device-mapper multipath packages provide tools to manage multipath devices by issuing instructions to the device-mapper multipath kernel module, and by managing the creation and removal of partitions for device-mapper...
RedHat Security Advisory RHSA-2009:0409
The remote host is missing updates announced in advisory RHSA-2009:0409. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center KDC. An input validation flaw was...
RedHat Security Advisory RHSA-2009:0337
The remote host is missing updates announced in advisory RHSA-2009:0337. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted...
RedHat Security Advisory RHSA-2009:0350
The remote host is missing updates announced in advisory RHSA-2009:0350. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted...
RedHat Security Advisory RHSA-2009:0420
The remote host is missing updates announced in advisory RHSA-2009:0420. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...
RedHat Security Advisory RHSA-2009:0421
The remote host is missing updates announced in advisory RHSA-2009:0421. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...
MIT Kerberos SPNEGO和ASN.1多个拒绝服务漏洞
BUGTRAQ ID: 34408 CVECAN ID: CVE-2009-0844,CVE-2009-0847 Kerberos是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5是一种常用的开源Kerberos实现。 krb5在实现SPNEGO GSS-API机制时getinputtoken函数可能会读过网络输入缓冲区的末尾，如果读取了无效地址空间可能会导致任何使用Kerberos GSS-API库来认证用户的网络服务崩溃。...
