SuSE 11.1 Security Update : Qt (SAT Patch Number 5131)

The following security issues have been fixed : - Specially crafted font files could cause a single byte heap based buffer overflow. CVE-2011-3193 - Specially crafted grey scale images could cause a heap-based buffer overflow. CVE-2011-3194 - SSL servers could run into an endless loop CVE-2010-26...

Linux/MIPS - add userUID 0 with password - 164 bytes

Linux/MIPS - add userUID 0 with password - 164 bytes. Shellcode exploit for linux platform / Title: Linux/MIPS -add userUID 0 with password - 164 bytes Date: 2011-11-24 Author: rigan - imrigan at gmail.com Note: Username - rOOt Password - pwn3d / include char sc = "\x24\x09\x73\x50" // li t1,2952...

Fedora 15 : kernel-2.6.41.1-1.fc15 (2011-15856)

Rebase to upstream 3.1.1 kernel Fix boot regression on 64-bit EFI machines Update to the Linux 3.0.8 2.6.40.8 stable release. Fix assorted security bugs. Bugfix update Update to the latest 3.0.7 stable kernel release which includes a variety of fixes. Note that Tenable Network Security has...

Fedora 16 : wireshark-1.6.3-1.fc16 (2011-15290)

This update fixes several security bugs, see http://www.wireshark.org/docs/= relnotes/wireshark-1.6.3.html for full details. This update fixes wireshark-devel subpackage. See bug 746655 for details. ---------------------------------------------------------------------- -----= Note that Tenable...

Fedora 16 : rubygem-actionmailer-3.0.10-1.fc16 / rubygem-actionpack-3.0.10-1.fc16 / etc (2011-11386)

Update to Rails 3.0.10 which fixes several security bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 16 : bugzilla-4.0.2-1.fc16 (2011-10399)

The Bugzilla developers have discovered a number of security bugs in Bugzilla. These are CVE-2011-2379, CVE-2011-2380, CVE-2011-2979, CVE-2011-2381, CVE-2011-2978, CVE-2011-2977. This release fixes these bugs. See http://www.bugzilla.org/security/3.4.11/ for all known details. Note that Tenable...

Fedora 14 : bugzilla-3.6.6-1.fc14 (2011-10413)

The Bugzilla developers have discovered a number of security bugs in Bugzilla. These are CVE-2011-2379, CVE-2011-2380, CVE-2011-2979, CVE-2011-2381, CVE-2011-2978, CVE-2011-2977. This release fixes these bugs. See http://www.bugzilla.org/security/3.4.11/ for all known details. Note that Tenable...

Google Fixes 30 Bugs in Chrome, Pays $17K in Bounties

Google has fixed 30 bugs in version 13.0.782.107, the latest build of its Chrome browser, pushed to the stable channel for Windows, Mac and Linux today. 14 of the bugs are deemed high-risk, including cross-origin script injection, HTML range handling and URI handling issues. Nine of the bugs are...

Kaillera - Multiple Clients Buffer Overflow Vulnerabilities

Kaillera - Multiple Clients Buffer Overflow Vulnerabilities !/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13...

Kaillera - Multiple Clients Buffer Overflow Vulnerabilities

!/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13: http://www.zophar.net/downloadfile/1907 2. Supraclient...

Google Fixes Six High-Risk Bugs in Chrome, Pays Out $6k in Bounties

Google has fixed seven security vulnerabilities in its Chrome browser, including six high-priority flaws. The new release of Chrome is version 12.0.742.112 and also includes an updated version of Flash. The latest version of Chrome is the third major update from the company since just the end of...

Fedora 13 : wireshark-1.2.17-1.fc13 (2011-7858)

Upgrade to latest release, fixing few security bugs. See http://www.wireshark.org/docs/relnotes/wireshark-1.2.17.html. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

Google Fixes 15 Bugs in Chrome, Gives Users Ability to Delete Flash Cookies

Google has fixed more than a dozen security bugs in its Chrome browser, including five high-severity vulnerabilities and one that qualified for the company’s highest bug bounty, a $3133.7 reward. The new version of Chrome has fixes for 15 separate security vulnerabilities, the most critical of...

New Version of Chrome Fixes Four Security Bugs

Google on Wednesday pushed out a new version of its Chrome browser to users, a release that fixes four security bugs, including two critical vulnerabilities. Only one of the bugs fixed in Chrome 11.0.696.71 qualified for the company’s bug bounty program, a high-severity problem caused by a stale...

openSUSE Security Update : OpenOffice_org (openSUSE-SU-2011:0337-1)

Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...

python security update

2.3.4-14.10 - add patch adapted from upstream patch 208 to add support for building against system expat; add --with-system-expat to configure invocation; remove embedded copy of expat 1.95.7 from the source tree during prep - ensure pyexpat.so gets built by explicitly listing all C modules in th...

Fedora 14 : wireshark-1.4.6-1.fc14 (2011-5569)

Upgrade to latest release, fixing few security bugs. See http://www.wireshark.org/docs/relnotes/wireshark-1.4.5.html and http://www.wireshark.org/docs/relnotes/wireshark-1.4.6.html Upgrade to latest release, fixing few security bugs. See http://www.wireshark.org/docs/relnotes/wireshark-1.4.5.html...

Vulnerabilities in some SCADA server softwares

The following are almost all the vulnerabilities I found for a quick experiment some months ago in certain well known server-side SCADA softwares still vulnerable in this moment. In case someone doesn't know SCADA like me before the tests: it's just one or more softwares usually a core, a graphic...

Fedora 15 : wireshark-1.4.4-1.fc15 (2011-2648)

Several security bugs were fixed in this release : - CVE-2011-0538: memory corruption when reading a malformed pcap file - CVE-2010-3445: stack overflow in BER dissector - CVE-2011-1143: NULL pointer dereference causing application crash when reading malformed pcap file - CVE-2011-1140: Multiple...

Fedora 13 : chm2pdf-0.9.1-8.fc13 (2011-0467)

This update fixes security bugs 474455 and 474457. The security issue is about unsafe use of fixed temporary directories by chm2pdf. This update will break --dontextract option. The option will not be shown in the list of available options. Note that Tenable Network Security has extracted the...