Mandrake Security Advisory MDVSA-2009:208 (libgadu)

The remote host is missing an update to libgadu announced via advisory MDVSA-2009:208. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : libgadu (MDVSA-2009:208-1)

A vulnerability has been found and corrected in libgadu : libgadu before 1.8.2 allows remote servers to cause a denial of service crash via a contact description with a large length, which triggers a buffer over-read CVE-2008-4776. This update provides a solution to this vulnerability. Update :...

CVE-2009-2196

Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors...

CVE-2009-1930

The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka "Telnet Credential Reflectio...

CVE-2009-2198

Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users...

Trickler: Trojan.Downloader.Delf.RGL

Trojan.Downloader.Delf.RGL is a Trickler that downloads and installs malicious files and unwanted content from remote servers onto the victim's machine without their consent...

CVE-2009-2381

Gizmo 3.1.0.79 on Linux does not verify a server's SSL certificate, which allows remote servers to obtain the credentials of arbitrary users via a spoofed certificate...

Design/Logic Flaw

Gizmo 3.1.0.79 on Linux does not verify a server's SSL certificate, which allows remote servers to obtain the credentials of arbitrary users via a spoofed certificate...

[SECURITY] [DSA 1809-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1809-1 [email protected] http://www.debian.org/security/ dann frazier Jun 01, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

CVE-2009-1633

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

Design/Logic Flaw

Windows HTTP Services aka WinHTTP in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https web sites by using DNS spoofing to "forward a connection" to a different https web site that has a valid certificate...

CVE-2009-0159

Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response...

Mandriva Update for kdelibs MDKSA-2007:072 (kdelibs)

Check for the Version of kdelibs OpenVAS Vulnerability Test Mandriva Update for kdelibs MDKSA-2007:072 kdelibs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

curl security update

CentOS Errata and Security Advisory CESA-2009:0341-01 Updated curl packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cURL is a tool for getting...

Mandrake Security Advisory MDVSA-2009:074 (libneon0.27)

The remote host is missing an update to libneon0.27 announced via advisory MDVSA-2009:074. OpenVAS Vulnerability Test $Id: mdksa2009074.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:074 libneon0.27 Authors: Thomas Reinke Copyright: Copyright c 2009...

CVE-2008-6441

Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via 1 the CLASS parameter in a DLMGR command, 2 a malformed package PKG, and possibly 3 the LEVEL parameter in a WELCOME command...

CVE-2008-6424

The CVE-2008-6424 entry corresponds to a directory traversal flaw in FFFTP 1.96b. An attacker-controlled FTP LIST response containing .. can cause the remote FTP server to create or overwrite arbitrary files on the affected system. The vulnerability arises from how LIST command results are handle...

Authorization

Trend Micro InterScan Web Security Virtual Appliance IWSVA 3.x and InterScan Web Security Suite IWSS 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offeri...

CVE-2009-0140

Unspecified vulnerability in the SMB component in Apple Mac OS X 10.4.11 and 10.5.6 allows remote SMB servers to cause a denial of service memory exhaustion and system shutdown via a crafted file system name...

CVE-2009-0388

CVE-2009-0388 affects UltraVNC and TightVNC: multiple integer overflow flaws in ClientConnection (CheckBufferSize/CheckFileZipBufferSize) can lead to heap corruption, Denial of Service, or possible code execution via crafted messages. OpenVAS and advisories show Windows/Linux variants and PoC usa...