VMSA-2009-0003 : ESX 2.5.5 patch 12 updates service console package ed

a. Updated ESX patch updates Service Console package ed ed is a line-oriented text editor, used to create, display, and modify text files both interactively and via shell scripts. A heap-based buffer overflow was discovered in the way ed, the GNU line editor, processed long file names. An attacke...

eEye Retina Network Security Scanner Detection

Retina Network Security Scanner is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39807; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"eEye Retina Network Security Scann...

eDirectory < 8.8 SP5 Multiple Vulnerabilities

Binary data 5098.prm...

Debian DSA-1814-1 : libsndfile - heap-based buffer overflow

Two vulnerabilities have been found in libsndfile, a library to read and write sampled audio data. The Common Vulnerabilities and Exposures project identified the following problems : - CVE-2009-1788 Tobias Klein discovered that the VOC parsing routines suffer of a heap-based buffer overflow whic...

FreeBSD : moinmoin -- multiple XSS vulnerabilities (fc4d0ae8-3fa3-11de-a3fd-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in MoinMoin, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to multiple parameters in action/AttachFile.py is not properly sanitised before being returned to the user. This can be exploited...

Microsoft Whale Client Components ActiveX (WhlMgr.dll) Multiple Method Overflows

The version of the Whale Client Components ActiveX control, a component of Microsoft Whale Intelligent Application Gateway product and installed on the remote Windows host, reportedly contains multiple stack-based buffer overflows that can be triggered using long arguments to the 'CheckForUpdates...

Project Woodstock 404 Error Page UTF-7 Encoded XSS

The remote web server contains a web application built using Woodstock components, which are user interface components for the web- based on Java Server Faces and AJAX. Woodstock is part of Sun Glassfish Enterprise Server and can also be used with other Java web containers, such as JBoss, Tomcat,...

MDKA-2007:062 : rpmdrake

The rpmdrake package, which provides the graphical software installation and update tools rpmdrake, drakrpm-edit-media and MandrivaUpdate, included with Mandriva Linux 2007 Spring contains several bugs. These include: When installing software with rpmdrake, if packages are selected for installati...

MDKA-2007:091 : drakx-net

Drakroam could erroneusly detect and reset the wireless mode to Master, instead of Managed. bug 30303 Draksambashare would check shares' names for partial matches, preventing the use of a share name partially equal to another. bug 30099 Draknfs and draksambashare were using the wrong translation...

Fedora 10 : thunderbird-2.0.0.19-1.fc10 (2009-0183)

Update to the new upstream Thunderbird 2.0.0.19 fixing multiple security issues: http://www.mozilla.org/security/known- vulnerabilities/thunderbird20.htmlthunderbird2.0.0.19 Note: after the updated packages are installed, Thunderbird must be restarted for the update to take effect. Note that...

Serv-U < 8.0.0.1 Multiple Vulnerabilities (DoS, Traversal)

The installed version of Serv-U is earlier than 8.0.0.1 and thus is reportedly affected by the following issues : - A directory traversal vulnerability enables an authenticated, remote attacker to create directories outside his or her home directory. CVE-2009-1031 - An authenticated, remote...

FreeBSD : zabbix -- php frontend multiple vulnerabilities (03140526-1250-11de-a964-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in the ZABBIX PHP frontend, which can be exploited by malicious people to conduct cross-site request forgery attacks and malicious users to disclose sensitive information and compromise a vulnerable system. Input appended to and passed via...

Debian DSA-1743-1 : libtk-img - buffer overflows

Two buffer overflows have been found in the GIF image parsing code of Tk, a cross-platform graphical toolkit, which could lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5137 It was discovered that libtk-img ...

e-Vision CMS Multiple Local File Include Vulnerabilities

e-Vision CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files and execute local scripts within the context of the webserver process...

FreeBSD : websvn -- multiple vulnerabilities (71597e3e-f6b8-11dd-94d9-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in WebSVN, which can be exploited by malicious users to disclose sensitive information, and by malicious people to conduct cross-site scripting attacks and manipulate data. Input passed in the URL to index.php is not properly sanitised...

FreeBSD : moinmoin -- multiple XSS vulnerabilities (6a523dba-eeab-11dd-ab4f-0030843d3802)

Secunia reports : Input passed to multiple parameters in action/AttachFile.py is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Certain input passed to...

Debian DSA-1711-1 : typo3-src - several vulnerabilities

Several remotely exploitable vulnerabilities have been discovered in the TYPO3 web content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0255 Chris John Riley discovered that the TYPO3-wide used encryption key is generated wi...

[SECURITY] Fedora 9 Update: libnasl-2.2.11-3.fc9

NASL is a scripting language designed for the Nessus security scanner. Its aim is to allow anyone to write a test for a given security hole in a few minutes, to allow people to share their tests without having to worry about their operating system, and to guarantee everyone that a NASL script can...

[SECURITY] Fedora 9 Update: nessus-core-2.2.11-1.fc9

Nessus is the world's most popular vulnerability scanner used in over 75,000 organizations world-wide. Many of the world's largest organizations are realizing significant cost savings by using Nessus to audit business-critic al enterprise devices and applications. The "Nessus" Project was started...

[SECURITY] Fedora 10 Update: libnasl-2.2.11-3.fc10

NASL is a scripting language designed for the Nessus security scanner. Its aim is to allow anyone to write a test for a given security hole in a few minutes, to allow people to share their tests without having to worry about their operating system, and to guarantee everyone that a NASL script can...