MDVA-2010:014 : spamassassin

A bug was discovered in the FHDATEPAST20XX rules that affects vanilla spamassassin 3.2 installations after the first of January 2010 aka. the y2k10 rule bug. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Win32 XP SP3 addFirewallRule

Win32 XP SP3 addFirewallRule. Shellcode exploit for win32 platform ; Author: sinn3r x90.sinner a.t gmail.c0m ; Tested on Windows XP SP3 ; Description: ; This shellcode will create a XP firewall rule to allow TCP traffic on port 445. ; Make sure ADVAPI32.dll is loaded. BITS 32 global start start:...

Win32 XP SP3 addFirewallRule

No description provided by source. ; Author: sinn3r x90.sinner a.t gmail.c0m ; Tested on Windows XP SP3 ; Description: ; This shellcode will create a XP firewall rule to allow TCP traffic on port 445. ; Make sure ADVAPI32.dll is loaded. BITS 32 global start start: ;for the handle xor edx, edx mov...

CentOS 4 : kernel (CESA-2009:1671)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel security update

CentOS Errata and Security Advisory CESA-2009:1671 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

kernel security and bug fix update

2.6.9-89.0.18.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

RHEL 4 : kernel (RHSA-2009:1671)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CVE-2009-4135

CVE-2009-4135 affects GNU Coreutils (versions 5.2.1–8.1). The issue lies in the distcheck rule in dist-check.mk, enabling a local user to gain privileges via a symbolic-link attack to a file under /tmp. Multiple advisories confirm an insecure temporary file handling as the root cause; several fee...

PT-2009-6308 · Gnu +1 · Gnu Coreutils +1

Name of the Vulnerable Software and Affected Versions: GNU coreutils versions 5.2.1 through 8.1 Description: The issue allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp. This is related to the distcheck rule in dist-check.mk. Recommendations: For...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that 1 delete the editing protection of a user or 2 delete a certa...

CVE-2009-3922

Multiple cross-site request forgery CSRF vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that 1 delete the editing protection of a user or 2 delete a certa...

CVE-2009-3922

Multiple cross-site request forgery CSRF vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that 1 delete the editing protection of a user or 2 delete a certa...

CVE-2009-3020

win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service system crash by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets CSS rule in an HTML document, possibly related to the Embedded OpenType EOT Font Engin...

Design/Logic Flaw

win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service system crash by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets CSS rule in an HTML document, possibly related to the Embedded OpenType EOT Font Engin...

Design/Logic Flaw

Sophos PureMessage Scanner service PMScanner.exe in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service message queue delay and incomplete spam rule update via a crafted 1 RTF or 2 PDF file...

Claroline v.1.8.11 Cross-Site Scripting

Author: Gerendi Sandor Attila Original Advisory: http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html Date: May 05, 2009 Package: Claroline 1.8.11 Product Homepage: http://www.claroline.net/ Versions Affected: v.1.8.11 Other versions may also be affected Severity: Medium...

Claroline 1.8.11 Cross Site Scripting

Author: Gerendi Sandor Attila Original Advisory: http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html Date: May 05, 2009 Package: Claroline 1.8.11 Product Homepage: http://www.claroline.net/ Versions Affected: v.1.8.11 Other versions may also be affected Severity: Medium...

CVE-2008-4360

moduserdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a...

CVE-2008-1093

Acresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts obtained from GetRules.asp web pages on FLEXnet Connect servers, which allows remote man-in-the-middle attackers to execute arbitrary VBScript code via Trojan horse Rules...