FreeBSD Ports: freeradius

The remote host is missing an update to the system as announced in the referenced advisory. VID 37a5c10f-bf56-11da-b0e9-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: net-snmp

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DSA-1615-1 xulrunner - several vulnerabilities

Bulletin has no description...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and 12.1 to fix security issues. More details about the issues may be found on the Mozilla site: http://www.mozilla.org/security/known-vulnerabilities/firefox20.html Here are the details from the Slackware 12.1 ChangeLog:...

AIX 610000 : U813474

The remote host is missing AIX PTF U813474 which is related to the security of the package devices.pci.77101223.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Fedora 7 : wireshark-1.0.0-1.fc7 (2008-2941)

Upgrade to 1.0.0 fixes several security flaws wireshark crashes, see BZ references. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 8 : dovecot-1.0.13-6.fc8 (2008-2464)

This update upgrades dovecot from version 1.0.10 to 1.0.13. Besides bug fixes, two security issues were fixed upstream in version 1.0.11 and 1.0.13. CVE-2008-1199 If Dovecot was configured with mailextragroups = mail, users having shell access to IMAP server could use this flaw to read, modify or...

Lookup: Insecure temporary file creation

Background Lookup is a search interface to books and dictionnaries for Emacs. Description Tatsuya Kinoshita reported that the ndeb-binary function does not handle temporay files correctly. Impact A local attacker could use a symlink attack to overwrite files with the privileges of the user runnin...

Opera security upgrade for Mac OS X

Opera 9.24 has a highly recommended security upgrade for users of the Adobe Flash Player 9.0.47.0 and earlier on Mac OS X. A security issue in Adobe Flash Player 9.0.47.0 and earlier running in Opera on Mac OS X has been found. Details about the vulnerability will be disclosed at a later date...

Apache Tomcat对偶个远程信息泄露漏洞

Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Apache Tomcat不正确过滤用户提交的数据，远程攻击者可以利用漏洞获得敏感信息。 Apache Tomcat不正确处理COOKIE值中用于分隔符的单引号，在部分环境中可泄露会话ID给攻击者。 Apache Tomcat不正确处理COOKIE值中的字符序列"，在部分环境中可泄露会话ID给攻击者。 Apache Software Foundation Tomcat 6.0.13 Apache Software Foundation Tomcat 6.0.12 Apache Software Foundation...

DSA-1325-1 evolution

Bulletin has no description...

Fedora Core 5 : dovecot-1.0-0.beta8.4.fc5 (2007-493)

Fri Mar 2 2007 Tomas Janousek - 1.0-0.beta8.4.fc5 - a little master login fix 224925 - fix for CVE-2007-2231 238440 - Thu Dec 21 2006 Tomas Janousek - 1.0-0.beta8.3.fc5 - fixed default paths in the example mkcert.sh to match configuration defaults fixes 183151 - fixed off by one 216508,...

DSA-1282-1 php4

Bulletin has no description...

[slackware-security] php

New php packages are available for Slackware 10.2 and 11.0 to improve the stability and security of PHP. Quite a few bugs were fixed -- please see http://www.php.net for a detailed list. All sites that use PHP are encouraged to upgrade. Please note that we haven't tested all PHP applications for...

WinZip FileView ActiveX control unsafe method

Added: 11/27/2006 CVE: CVE-2006-5198 BID: 21060 OSVDB: 30433 Background WinZip includes the FileView ActiveX control which provides a user interface similar to the file view pane in Windows Explorer. Problem The FileView ActiveX control is marked "safe for scripting" and exposes several unsafe...

OpenOffice.org: Multiple vulnerabilities

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description Internal security audits by OpenOffice.org have discovered three security vulnerabiliti...

[Full-disclosure] Skype - URI Handler Command Switch Parsing

======================================================================== = Skype - URI Handler Command Switch Parsing = = Vendor Website: = http://www.skype.com = = Affected Version: = Skype for Windows: = All releases prior to and including 2.0..104 = Release 2.5..0 to and including 2.5..78 = =...

RHEL 4 : tar (RHSA-2006:0232)

An updated tar package that fixes a buffer overflow bug is now available for Red Hat Enterprise Linux 4. This update has been rated as having Moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore individual fil...

DSA-908-1 sylpheed-claws - buffer overflows

Bulletin has no description...

RHEL 2.1 / 3 / 4 : openssl (RHSA-2005:800)

Updated OpenSSL packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as we...