Fedora Core 4 : firefox-1.0.7-1.1.fc4 (2005-926)

An updated firefox package that fixes several security bugs is now available for Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox processes XBM image...

RHEL 3 : kernel (RHSA-2005:663)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the sixth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...

Important: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 6

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the sixth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...

ATutor-1.5.1 SQL injection and XSS bugs

TITLE: ATutor-1.5.1 SQL injection and XSS bugs Severity: Medium or even critical SOFTWARE: ATutor-1.5.1 http://www.atutor.ca/ DESCRIPTION: ATutor-1.5.1 is a web base education portal.THe system is vulnable to SQL injection and XSS attacks: SQL injection: http://localhost/tour/passwordreminder.php...

RHEL 4 : firefox (RHSA-2005:586)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:586 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content...

SUSE-SA:2005:032: java2

The remote host is missing the patch for the advisory SUSE-SA:2005:032 java2. Two security bugs in the SUN Java implementation have been fixed. Java Web Start can be exploited remotely due to an error in input validation of tags in JNLP files, so an attacker can pass arbitrary command-line option...

[Full-disclosure] Silently fixed security bugs in Oracle Critical Patch Update July 2005

Hello BugTraq-Reader After reading the patch documentation and some tests with the CPU July 2005 I found out that Oracle fixed some security bugs silently without mention these bugs in their current risk matrix. Detailed information about most of these bugs are not available via Metalink but in...

Security Advisory for Bugzilla 2.18, 2.19.2, and 2.16.8

Summary ======= Bugzilla is a Web-based bug-tracking system, used by a large number of software projects. This advisory covers two security bugs that have recently been discovered and fixed in the Bugzilla code: + In all versions of Bugzilla since at least 2.16, it is possible to guess the name o...

Firefox Remote Compromise Technical Details

Firefox Remote Compromise Technical Details Before I start, I need to say that this thing has been patched on Mozilla's server. If you take a look at any of the extension install pages on their site, you will see that the install function has a bunch of random letters and numbers after it. Even...

RHEL 2.1 / 3 : Mozilla (RHSA-2005:384)

Updated Mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bu...

Multiple Orcale bugs

Buffer overflows, DoS, SQL injections, etc...

SUSE-SA:2004:037: kernel

The remote host is missing the patch for the advisory SUSE-SA:2004:037 kernel. An integer underflow problem in the iptables firewall logging rules can allow a remote attacker to crash the machine by using a handcrafted IP packet. This attack is only possible with firewalling enabled. We would lik...

Microsoft NNTP code execution

Multiple bugs during XPAT command parsing...

CGI bugs

No description provided...

FreeRADIUS DoS

Multiple bugs on malcrafted packet handling...

Fedora Core 2 : kernel-2.6.7-1.494.2.2 (2004-247)

This update kernel for Fedora Core 2 contains the security fixes as found by Paul Starzetz from isec.pl. In addition this kernel contains a significant number of bugfixes that are inherited from the newer kernel.org kernel this release is based on. Note that Tenable Network Security has extracted...

xcart343.txt

X-Cart ttp://www.x-cart.comis a well distributed PHP e-commerce solution. We have discovered some security related bugs in X-Cart Version 3.4.3. It is possible that other versions are vulnerable too. Any visitor can view any file on the web server. This URL my be used as proof of concept:...

BremsServer124.txt

Donato Ferrante Application: BremsServer http://www.herberlin.de/ Version: 1.2.4 Bugs: directory traversal and cross site scripting Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...

[BUGZILLA] Security Advisory - SQL injection, information leak

Bugzilla Security Advisory November 2, 2003 Summary ======= Bugzilla is a Web-based bug-tracking system, currently used by a large number of software projects. This advisory covers security bugs that have recently been discovered and fixed in the Bugzilla code: two instances of arbitrary SQL...

Multiple bugs in ODFaq 1.21b

hi ЗАРАЗА, ZUD SECURITY TEAM PRESENT bug found by nimber Email : [email protected] Site: www.zudteam.org HomePage: www.nimber.plux.ru 9.08.2003 Script: ODFaq Versions: 1.21b Web Site: www.oodie.com Bug: Multiple bugs. Проблема: 1 Cross Site Scripting. JS/HTML code injection. Exploitexaple:...