SUSE-SA:2006:020: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:020 clamav. Clamav was updated to version 0.88.1 to fix the following security problems: - An integer overflow in the PE header parser CVE-2006-1614. - Format string bugs in the logging code could potentially be exploited to execu...

Hacked SQL Server system ten ways-vulnerability warning-the black bar safety net

Using either the manual probe or the use of security testing tools, malicious attackers always use a variety of tricks from your firewall to internal and external compromise your SQL Server system. Since the hackers do such a thing. You also need to implement the same attacks to test your system'...

SUSE-SA:2006:015: flash-player

The remote host is missing the patch for the advisory SUSE-SA:2006:015 flash-player. A critical security vulnerability has been identified in the Adobe Macromedia Flash Player that allows an attacker who successfully exploits these vulnerabilities to take control of the application running the...

SUSE-SA:2006:017: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2006:017 sendmail. The popular MTA sendmail is vulnerable to a race condition when handling signals. Under certain circumstances this bug can be exploited by an attacker to execute commands remotely. Sendmail was the default MTA in SuS...

SUSE-SA:2006:016: xorg-x11-server

The remote host is missing the patch for the advisory SUSE-SA:2006:016 xorg-x11-server. A programming flaw in the X.Org X Server allows local attackers to gain root access when the server is setuid root, as is the default in SUSE Linux 10.0. This flaw was spotted by the Coverity project. Only SUS...

DEBIAN-CVE-2006-1251

Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command...

CVE-2006-1251

Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command...

CVE-2006-1251

CVE-2006-1251 relates to an argument injection vulnerability in sa-exim 4.2, specifically in greylistclean.cron. The root cause is unquoted, whitespace-delimited filenames passed from the To field to the rm command, enabling an attacker to delete arbitrary files via a crafted email. The vulnerabi...

CVE-2006-1251

Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command...

SUSE-SA:2006:013: gpg,liby2util

The remote host is missing the patch for the advisory SUSE-SA:2006:013 gpg,liby2util. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2006:013 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SUSE-SA:2006:011: heimdal

The remote host is missing the patch for the advisory SUSE-SA:2006:011 heimdal. Heimdal is a Kerberos 5 implementation from the Royal Institut of Techno- logy in Stockholm. This update fixes two bugs in heimdal. The first one occurs in the rsh daemon and allows an authenticated malicious user to...

SUSE-SA:2006:009: gpg,liby2util

The remote host is missing the patch for the advisory SUSE-SA:2006:009 gpg,liby2util. With certain handcraftable signatures GPG was returning a 0 valid signature when used on command-line with option --verify. This only affects GPG version 1.4.x, so it only affects SUSE Linux 9.3 and 10.0. Other...

SQL Server SA rights summary of the classic techniques-vulnerability warning-the black bar safety net

The premise of the need for tools: SQL Query Analyzer and SqlExec Sunx Version The first part: About to remove the xpcmdshell to protect the system analysis summary: First of all know about the statement: 1. Remove the xpcmdshell extended procedure of the method is to use the following statement:...

SUSE-SA:2006:007: binutils,kdelibs3,kdegraphics3,koffice,dia,lyx

The remote host is missing the patch for the advisory SUSE-SA:2006:007 binutils,kdelibs3,kdegraphics3,koffice,dia,lyx. A SUSE specific patch to the GNU linker 'ld' removes redundant RPATH and RUNPATH components when linking binaries. Due to a bug in this routine ld occasionally left empty RPATH...

FreeBSD-SA-06:07.pf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:07.pf Security Advisory The FreeBSD Project Topic: IP fragment handling panic in pf4 Category: contrib Module: syscontrib Announced: 2006-01-25 Credits: Jakob...

SUSE-SA:2006:003: kdelibs3

The remote host is missing the patch for the advisory SUSE-SA:2006:003 kdelibs3. Maksim Orlovich discovered a bug in the JavaScript interpreter used by Konqueror. UTF-8 encoded URLs could lead to a buffer overflow that causes the browser to crash or execute arbitrary code. Attackers could trick...

SUSE-SA:2006:001: xpdf,kpdf,gpdf,kword

The remote host is missing the patch for the advisory SUSE-SA:2006:001 xpdf,kpdf,gpdf,kword. 'infamous41md', Chris Evans and Dirk Mueller discovered multiple places in xpdf code where integer variables are insufficiently checked for range or overflow. Specially crafted PDF files could lead to...

SUSE-SA:2005:071: perl

The remote host is missing the patch for the advisory SUSE-SA:2005:071 perl. Integer overflows in the format string functionality in Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap...

SUSE-SA:2005:070: ipsec-tools,freeswan,openswan

The remote host is missing the patch for the advisory SUSE-SA:2005:070 ipsec-tools,freeswan,openswan. Openswan, Freeswan and raccoon ipsec-tools have been updated to fix crashes in aggressive mode. An attacker might send specially crafted packets that can crash racoon or Pluto. The ipsec-tools /...

SUSE-SA:2005:069: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2005:069 php4,php5. Updated PHP packages fix the following security issues: - Stefan Esser found out that a bug in parsestr could lead to activation of registerglobals CVE-2005-3389 and additionally that file uploads could overwrite...