Fedora 8 : xine-lib-1.1.15-1.fc8 (2008-7572)

This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files CVE-2008-3231 - multiple possible buffer overflows detailed in oCERT-2008-008 For more details, see: http://sourceforge.net/project/shownotes.php?releaseid=619869&groupi d=9655...

Fedora 9 : xine-lib-1.1.15-1.fc9 (2008-7512)

This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files CVE-2008-3231 - multiple possible buffer overflows detailed in oCERT-2008-008 For more details, see: http://sourceforge.net/project/shownotes.php?releaseid=619869&groupi d=9655...

FreeBSD Ports: horde, horde-php5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Novell eDirectory存在多个安全漏洞

CNCAN ID：CNCAN-2008090104 Novell eDirectory是一款支持轻量目录访问协议LDAP并基于目录的身份管理系统。 Novell eDirectory存在多个安全问题，远程攻击者可以利用漏洞进行跨站脚本或任意代码执行攻击。 1存在未明基于堆的缓冲区溢出。 2存在未明内存破坏问题。 3由于不正确处理HTTP "Language"字段数据，可触发基于堆的缓冲区溢出。 4超长"Content-Length"字段数据，可触发基于堆的缓冲区溢出。 5不正确过滤传递给HTTP协议栈的参数，可导致任意HTML注入或脚本代码在目标用户浏览器上执行。 Novell...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.0. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

FreeBSD : opera -- multiple vulnerabilities (73ec1008-72f0-11dd-874b-0030843d3802)

The Opera Team reports : Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be changed, a site can change the address of frames on other sites inside any window that it has opened. This allows sites to...

Kayako SupportSuite < 3.30.00 Multiple Vulnerabilities

GulfTech Security Research August 09, 2008 Vendor : Kayako Infotech Ltd. URL : http://www.kayako.com/ Version : Kayako SupportSuite 3.30.00 Risk : Multiple Vulnerabilities Description: Kayako SupportSuite is a very popular online eSupport application that consists of several well known Kayako...

VMSA-2008-0013:Updated ESX packages for OpenSSL, net-snmp, perl

VMSA-2008-0013.4 Updated ESX packages for OpenSSL, net-snmp, perl VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0013.4 VMware Security AdvisorySynopsis: Updated ESX packages for OpenSSL, net-snmp, perl VMware Security AdvisoryIssue date: 2008-08-12 VMware Security...

Fedora 9 : httpd-2.2.9-1.fc9 (2008-6393)

This update includes the latest release of httpd 2.2. Two security issues are fixed in this update: A flaw was found in the handling of excessive interim responses from an origin server when using modproxyhttp. In a forward proxy configuration, if a user of the proxy could be tricked into visitin...

RHEL 5 : kernel (RHSA-2008:0612)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Fedora 9 : trac-0.10.5-1.fc9 (2008-6833)

Update to 0.10.5 to fix two non-critical security issues: CVE-2008-2951: Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL in the q parameter. CVE-2008-3328: Cross-site...

[slackware-security] httpd

New httpd packages are available for Slackware 12.0, 12.1, and -current to fix XSS security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-5000 https://vulners.com/cve/CVE-2007-6388 Here are the details...

RHEL 4 : mysql (RHSA-2008:0768)

Updated mysql packages that fix various security issues, several bugs, and add an enhancement are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database...

Fedora 8 : mantis-1.1.2-1.fc8 (2008-6657)

Update to upstream version 1.1.2, fixing following security issues: - 0008974: XSS Vulnerability in filters - 0008975: CSRF Vulnerabilities in usercreate CVE-2008-2276 - 0008976: Remote Code Execution in admconfig - 0009154: arbitrary file inclusion through user preferences page See upstream...

Fedora 9 : mantis-1.1.2-1.fc9 (2008-6647)

Update to upstream version 1.1.2, fixing following security issues: - 0008974: XSS Vulnerability in filters - 0008975: CSRF Vulnerabilities in usercreate CVE-2008-2276 - 0008976: Remote Code Execution in admconfig - 0009154: arbitrary file inclusion through user preferences page See upstream...

Fedora 8 : Miro-1.2.3-3.fc8 / blam-1.8.3-17.fc8 / cairo-dock-1.6.1.1-1.fc8.1 / chmsee-1.0.0-3.31.fc8 / etc (2008-6491)

Updated firefox packages that fix several security issues are now available for Fedora 8. An integer overflow flaw was found in the way Firefox displayed certain web content. A malicious website could cause Firefox to crash, or execute arbitrary code with the permissions of the user running...

Fedora 8 : seamonkey-1.1.11-1.fc8 (2008-6517)

Updated seamonkey packages that fix several security issues are now available for Fedora 8. An integer overflow flaw was found in the way SeaMonkey displayed certain web content. A malicious website could cause SeaMonkey to crash, or execute arbitrary code with the permissions of the user running...

Fedora 9 : devhelp-0.19.1-3.fc9 / epiphany-2.22.2-3.fc9 / epiphany-extensions-2.22.1-3.fc9 / etc (2008-6518)

Updated firefox packages that fix several security issues are now available for Fedora 9. An integer overflow flaw was found in the way Firefox displayed certain web content. A malicious website could cause Firefox to crash, or execute arbitrary code with the permissions of the user running...

Oracle 8.1.5 安装漏洞

Oracle 8.1.5.0.1 for Linux安装程序会创建/tmp/orainstall目录，它被oracle:dba 拥有，权限设置为 711.在这个目录中它会创建一个名为orainstRoot.sh的shell脚本， 它的权限是777.然后，安装程序会停止，并提示你以root身份运行这个脚本。 这里存在的两个潜在的安全问题是： 1. 安装程序在往orainstRoot.sh写入的时候并不检查这个文件是否存在或是否是一个 链接文件，甚至不检查它是否被oracle用户拥有。因此一个攻击者可能用这个弱点来...