RedHat Update for postgresql RHSA-2008:0038-01

Check for the Version of postgresql OpenVAS Vulnerability Test RedHat Update for postgresql RHSA-2008:0038-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for cups RHSA-2008:0157-01

Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2008:0157-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CUPS cupsd RSS订阅空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 32419 CVECAN ID: CVE-2008-5183 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 如果向默认监听于631/tcp端口的CUPS守护程序（/usr/sbin/cupsd）添加了多于100个RSS订阅的话，就会触发空指针引用，导致守护程序崩溃。 Easy Software Products CUPS 1.3.8 RedHat ------...

enscript security update

CentOS Errata and Security Advisory CESA-2008:1016 An updated enscript packages that fixes several security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU enscript converts ASCII file...

RHEL 4 / 5 : pidgin (RHSA-2008:1023)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:1023 advisory. - pidgin: remote DoS via MSN message with crafted file name CVE-2008-2955 - pidgin: unrestricted download of arbitrary files triggered v...

Moderate: Red Hat Security Advisory: cups security update

Updated cups packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX® Printing System CUPS provides a portable printing layer for UNIX operating system...

Low: Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server

Updated tomcat packages that fix multiple security issues are now available for Red Hat Network Satellite Server. This update has been rated as having low security impact by the Red Hat Security Response Team. This update corrects several security vulnerabilities in the Tomcat component shipped a...

Vim多个插件字符转义任意命令执行漏洞

BUGTRAQ ID: 32462,32463 CVECAN ID: CVE-2008-3074,CVE-2008-3074 VIM是一款免费开放源代码文本编辑器，可使用在Unix/Linux操作系统下。 VIM的tar.vim和zip.vim插件中shellescape函数没有正确地转义所有项（“!”字符）。如果用户使用tar.vim插件打开了TAR文档的话，就会导致以运行Vim用户的权限执行任意指令。 VIM Development Group VIM 7.1 VIM Development Group VIM 7.0 RedHat ------...

RHEL 5 : vim (RHSA-2008:0580)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0580 advisory. - vim format string flaw CVE-2007-2953 - vim: command execution via scripts not sanitizing inputs to execute and system CVE-2008-2712 - Vim...

RHEL 4 : kernel (RHSA-2008:0972)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0972 advisory. - kernel PWC driver DoS CVE-2007-5093 - kernel: dio: zero struct dio with kzalloc instead of manually CVE-2007-6716 - kernel: ptrace: Paddin...

RHEL 4 / 5 : firefox (RHSA-2008:0978)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0978 advisory. - Mozilla buffer overflow in http-index-format parser CVE-2008-0017 - Mozilla crash and remote code execution via proto tampering...

Moderate: Red Hat Security Advisory: gnutls security update

Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GnuTLS library provides support for cryptographic algorithms and for protocols such as...

Moderate: Red Hat Security Advisory: ed security update

An updated ed package that fixes one security issue is now available for Red Hat Enterprise Linux 2.1, 3, 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ed is a line-oriented text editor, used to create, display, and modify text files...

Moderate: Red Hat Security Advisory: pam_krb5 security update

An updated pamkrb5 package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The pamkrb5 module allows Pluggable Authentication Modules PAM aware applications to use...

libxml XML实体名堆溢出漏洞

BUGTRAQ ID: 31126 CVECAN ID: CVE-2008-3529 libxml软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml2库的parser.c文件中的xmlParseAttValueComplex函数中存在堆溢出漏洞，如果用户受骗打开的XML文件中包含有超长的实体名称的话，就可以触发这个溢出，导致拒绝服务或执行任意指令。 XMLSoft Libxml2 2.7.0 RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2008:0886-01）以及相应补丁:...

Important: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XML files. It...

Important: Red Hat Security Advisory: tomcat security update

Updated tomcat packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP...

Red Hat OpenSSH软件包篡改漏洞

BUGTRAQ ID: 30794 Red Hat Linux是全世界应用最广泛的Linux系统之一。 Red Hat公司的一些计算机系统被入侵，有少量的OpenSSH软件包被篡改，这些被篡改的软件包仅用于签名Red Hat Enterprise Linux 4（i386和x8664架构）及Red Hat Enterprise Linux 5（x8664架构）。如果用户受骗从被入侵的Red Hat软件代码库下载并安装了恶意的OpenSSH软件包的话，就可能导致在系统上安装木马。 使用Red Hat Network升级系统的用户不受影响，只有通过非官方Red Hat订阅渠道获得Red...

Low: Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update

Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in the Red Hat Network Satellite Server Sun Java Runtime Environment. This update has been rated as having low security impact by the Red Hat Security Response Team. This...

RHEL 4 : nss_ldap (RHSA-2008:0715)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...