327 matches found
JasPer memory corruption vulnerabilities
Overview Some versions of JasPer contain multiple vulnerabilities that may allow a remote, unauthenticated attacker to execute arbitrary code. Description JasPer fails to properly decode marker segments and other sections in malformed JPEG2000 files. Malformed inputs can cause heap buffer overflo...
Restrictions
The iPhone, like the many smartphones that have debuted in its wake, includes a variety of powerful applications and features. Many of these functions and apps, including the camera, the Safari browser, FaceTime and others, can have privacy and security implications, depending upon how they’re us...
Dennis Fisher and Paul Roberts on the MacDefender Malware and Google Wallet
Dennis Fisher and Paul Roberts discuss the re-emergence of the MacDefender malware, Apple’s decision to push out an OS X update to protect against and the release of Google Wallet and the security implications of the system. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground...
CentOS Update for popt CESA-2010:0678 centos4 i386
Check for the Version of popt OpenVAS Vulnerability Test CentOS Update for popt CESA-2010:0678 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
RedHat Update for rpm RHSA-2010:0678-01
Check for the Version of rpm OpenVAS Vulnerability Test RedHat Update for rpm RHSA-2010:0678-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Moderate: Red Hat Security Advisory: rpm security and bug fix update
Updated rpm packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
Google Cloud Print: Thinking Through the Security, Privacy Implications
Google’s plans to introduce a Cloud Print service that’s already being hailed as “printer voodoo” because it lets users print to any printer anywhere in the world, even from mobile phones. However, there are some privacy and security implications that need to be fleshed out before end users rush ...
Privacy Concerns Raised About Smart Grids
Technologists already are worried about the security implications of linking nearly all elements of the U.S. power grid to the public Internet. Now, privacy experts are warning that the so-called “smart grid” efforts could usher in a new class of concerns, as utilities begin collecting more...
SLES9: Security update for Acrobat Reader
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: acroread More details may also be found by searching for keyword 5019054 within the SuSE Enterprise Server 9 patch database at...
Sun Java JRE Multiple Vulnerabilities (Linux)
This host is installed with Sun Java JRE and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbsunjavajredosvulnlin.nasl 7699 2017-11-08 12:10:34Z santu $ Sun Java JRE Multiple Vulnerabilities Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow (PoC)
LibSPF2 1.2.8 - DNS TXT Record Parsing Bug Heap Overflow PoC Advisory: DNS TXT Record Parsing Bug in LibSPF2 Author: Dan Kaminsky, Director of Penetration Testing, IOActive Inc, [email protected] PGP Key In Appendix Abstract: A relatively common bug parsing TXT records delivered over DNS,...
Debian Security Advisory DSA 975-1 (nfs-user-server)
The remote host is missing an update to nfs-user-server announced via advisory DSA 975-1. Marcus Meissner discovered that attackers can trigger a buffer overflow in the path handling code by creating or abusing existing symlinks, which may lead to the execution of arbitrary code. This vulnerabili...
Fedora Core 3 : cups-1.1.22-0.rc1.8.6 (2005-733)
These updated packages fix a problem handling PDF files that could have security implications CVE-2005-2097. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...
GLSA-200408-16 : glibc: Information leak with LD_DEBUG
The remote host is affected by the vulnerability described in GLSA-200408-16 glibc: Information leak with LDDEBUG Silvio Cesare discovered a potential information leak in glibc. It allows LDDEBUG on SUID binaries where it should not be allowed. This has various security implications, which may be...
glibc: Information leak with LD_DEBUG
Background The GNU C library defines various Unix-like "system calls" and other basic facilities needed for a standard POSIX-like application to operate. Description Silvio Cesare discovered a potential information leak in glibc. It allows LDDEBUG on SUID binaries where it should not be allowed...
RHEL 2.1 : glibc (RHSA-2003:249)
Updated glibc packages that fix a number of bugs as well as a buffer overflow issue are now available. The GNU libc package known as glibc contains the standard C libraries used by applications. A bug in the getgrouplist function can cause a buffer overflow if the size of the group list is too...
mksnap_ffs clears file system options
The kernel interface for creating a snapshot of a filesystem is the same as that for changing the flags on that filesystem. Due to an oversight, the mksnapffs8 command called that interface with only the snapshot flag set, causing all other flags to be reset to the default value. A regularly...
Using Java from Javascript
Opera and Netscape browsers allow you to include java methods calls in your javascript . As Javascript has support for objects you can use objects returned by these calls in your scripts . I have been looking for information about the possibly security implications and vulnerabilities published...
Microsoft Internet Explorer 5 - IFrame/Frame Cross-Site/Zone Script Execution
source: https://www.securityfocus.com/bid/5672/info When a Microsoft Internet Explorer MSIE window opens another window, security checks should prevent the parent from accessing the child if the latter is of another domain or Security Zone. It has been reported that such checks fails to occur...