Fedora 8 : drupal-5.9-1.fc8 (2008-6916)

Update to 5.9, security fixes: SA-2008-046 - http://drupal.org/node/286417 CVE-2008-3222 - session fixation issue, that was first reported to be fixed via SA-2008-044 in drupal 5.8, but the patch for it was not included in the 5.8 tarball. Remember to log in to your site as the admin user before...

Fedora 9 : drupal-6.3-1.fc9 (2008-6415)

Update to 6.3, security fixes: SA-2008-044 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network Security has extracted the preceding description...

Fedora 8 : drupal-5.8-1.fc8 (2008-6411)

Update to 5.8, security fixes: SA-2008-044 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network Security has extracted the preceding description...

Cisco Unified Communications Manager CTI服务拒绝服务漏洞

BUGTRAQ ID: 29933 CVECAN ID: CVE-2008-2061 Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 CUCM的计算机电话集成（CTI）管理器服务在处理畸形输入时存在拒绝服务漏洞，远程攻击者可以通过向默认的TCP 2748监听端口发送恶意报文导致语音服务中断。 Cisco Unified Communications Manager 6.x Cisco Unified Communications Manager 5.x 临时解决方法：...

GnuTLS Server Name extension Denial of Service

Overview A vulnerability exists in GnuTLS that may allow a remote attacker to cause a denial of service. Description GnuTLS contains a vulnerability in gnults-serv that may result in a denial of service when handling a specially crafted Client Hello message. According to CERT-FI Vulnerability...

Cisco IOS SSH服务器多个拒绝服务漏洞

BUGTRAQ ID: 29314 CVECAN ID: CVE-2008-1159 Cisco IOS是思科网络设备中所使用的互联网操作系统。 Cisco IOS中SSH实现的服务端存在多个漏洞，允许未经认证的用户生成伪造的内存访问错误或在某些情况下重载设备。如果攻击者能够重载设备的话，就可以反复利用这些漏洞导致持续的拒绝服务。 IOS SSH服务器是默认禁用的可选服务，但作为管理Cisco IOS设备的最佳安全实践，强烈建议使用这个服务。 Cisco IOS 12.4 临时解决方法：...

Fedora 8 : gnutls-1.6.3-3.fc8 (2008-4183)

Fixes critical security issue GNUTLS-SA-2008-1 described here: http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html All applications and system services which utilize gnutls library must be restarted for the updates to take effect. Note that Tenable Network Security has extracted...

Fedora 7 : gnutls-1.6.3-3.fc7 (2008-4274)

Fixes critical security issue GNUTLS-SA-2008-1 described here: http://lists.gnu.org/archive/html/gnutls-devel/2008-05/msg00060.html All applications and system services which utilize gnutls library must be restarted for the updates to take effect. Note that Tenable Network Security has extracted...

Buffer overflow

The gnutlsservernamerecvparams function in lib/extservername.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service crash or...

Cisco IOS虚拟专用拨号网络多个拒绝服务漏洞

BUGTRAQ ID: 28460 CVECAN ID: CVE-2008-1151,CVE-2008-1150 Cisco IOS是思科网络设备所使用的互联网操作系统。 如果某些Cisco IOS 12.3之前版本中使用了点到点隧道协议（PPTP）的话，虚拟专用拨号网络（VPDN）中就可能存在两个安全漏洞，远程攻击者可能利用此漏洞获取设备敏感信息或导致设备不可用。...

Fedora 7 : krb5-1.6.1-9.fc7 (2008-2637)

This update incorporates fixes included in MITKRB5-SA-2008-001 use of uninitialized pointer / double-free in the KDC when v4 compatibility is enabled and MITKRB5-SA-2008-002 incorrect handling of high-numbered descriptors in the RPC library. This update also incorporates less-critical fixes for a...

MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2008-002 MIT krb5 Security Advisory 2008-002 Original release: 2008-03-18 Last update: 2008-03-18 Topic: array overrun in RPC library used by kadmind CVE-2008-0947, CVE-2008-0948 VU374121 Use of high-numbered file descriptors in the RPC...

Cisco Unified IP Phone SCCP及SIP协议多个远程安全漏洞

BUGTRAQ ID: 27774 CVECAN ID: CVE-2008-0530,CVE-2008-0526,CVE-2008-0527,CVE-2008-0528,CVE-2008-0529,CVE-2008-0531 Cisco Unified IP Phone是思科的统一IP电话解决方案。 DNS响应解析溢出 运行SCCP和SIP固件的Cisco Unified IP Phone 7940、7940G、7960和7960G设备在处理DNS响应时存在缓冲区溢出漏洞，特制的DNS响应可以触发缓冲区溢出，在有漏洞的电话上执行任意指令。该漏洞记录为CVE-2008-0530和Cisco...

Small Axe 0.3.1 (linkbar.php cfile) Remote File Inclusion Vulnerability

No description provided by source. Name : Small Axe Weblog 0.3.1 Remote File Include Download From : http://releases.smallaxesolutions.com/smallaxe-0.3.1.zip Found By : RoMaNcYxHaCkEr We Are H-T TeaM Houssamix - ToXiC Home Page : Not Yet : Tryag.cc/cc No-Hack.net V99x.com/vb Hackteach.org/cc...

Debian Security Advisory DSA 520-1 (krb5)

The remote host is missing an update to krb5 announced via advisory DSA 520-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1175-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 8 : drupal-5.6-1.fc8 (2008-0485)

Update to 5.6, security fixes : DRUPAL-SA-2008-005 DRUPAL-SA-2008-006 DRUPAL-SA-2008-007 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network...

appleupdate-exec.txt

--------------------------------------------------------------------- Apple Mac OS X Software Update Remote Command Execution Vulnerability Copyright c 2007 Moritz Jodeit 2007/12/17 --------------------------------------------------------------------- I. Vulnerability Description The OS X Softwar...

CityWriter 0.9.7 - head.php Remote File Inclusion

CityWriter 0.9.7 - head.php Remote File Inclusion Name : CityWriter 0.9.7 Remote File Include Download From : http://download.hulihanapplications.com/citywriter/citywriter-0.97.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet :...

Fastpublish CMS 1.9999 config[fsBase] RFI Vulnerability

No description provided by source. Name : Fastpublish CMS 1.9999 configfsBase Remote File Include Download From : http://www.fastpublish.org/aufbau/phpcontent/downloadlist.php?action=download&id=53&sprache=en Found By : RoMaNcYxHaCkEr Home Page : Not Yet :...