[SECURITY] Fedora 14 Update: kdeutils-4.6.2-1.fc14

Utilities for KDE 4. Includes: kcharselect: character selector kfloppy: floppy formatting tool superkaramba sweeper: clean unwanted traces the user leaves on the system...

[SECURITY] Fedora 15 Update: kdeutils-4.6.2-1.fc15

Utilities for KDE 4. Includes: kcharselect: character selector kfloppy: floppy formatting tool superkaramba sweeper: clean unwanted traces the user leaves on the system...

[USN-1115-1] language-selector vulnerability

========================================================================== Ubuntu Security Notice USN-1115-1 April 19, 2011 language-selector vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

USN-1115-1: language-selector vulnerability

Romain Perier discovered that the language-selector D-Bus backend did not correctly check for Policy Kit authorizations. A local attacker could exploit this to inject shell commands into the system-wide locale configuration file, leading to root privilege escalation...

CVE-2011-1842

dbusbackend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the 1 SetSystemDefaultLangEnv and 2 SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different...

RHEL 6 : kernel (RHSA-2010:0842)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0842 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: Missi...

Firefox CSS选择器跨域信息泄露漏洞

BUGTRAQ ID: 41872 CVE ID: CVE-2010-0654 Firefox是一款流行的开源WEB浏览器。 如果攻击者能够向目标页的A和B两点之间注入CSS选择器的开放和关闭部分，用户就可以通过getComputedStyle API读取两个注入点之间的部分。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla Thunderbird 3.1.x Mozilla Thunderbird 3.0.x Mozilla SeaMonkey 2.0.6 厂商补丁： Mozilla -------...

Mozilla Products Multiple Vulnerabilities (MFSA2010-34, MFSA2010-39, MFSA2010-40, MFSA2010-42, MFSA2010-46, MFSA2010-47) - Windows

Mozilla Firefox/Seamonkey/Thunderbird are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kdeutils FEDORA-2010-6096

Check for the Version of kdeutils OpenVAS Vulnerability Test Fedora Update for kdeutils FEDORA-2010-6096 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

kvm: emulator privilege escalation segment selector check

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging...

iPhone CSS::Selector Crash Exploit

!/usr/bin/python , dM MMr 4MMML . MMMMM. xf . "M6MMM .MM- Mh.. +MM5MMM .MMMM .MMM. .MMMMML. MMMMMh MMMh. MM5MMM MMMMMMM 3MMMMx. 'MMM3MMf xnMMMMMM" 'MMMMM MMMMMM. nMMMMMMP" MMMMMx "MMM5M\ .MMMMMMM= MMMMMh "MMMMM" JMMMMMMP MMMMMM GMMMM. dMMMMMM . MMMMMM "MMMM .MMMMM .nnMP" .. MMMMx MMM" dMMMM"...

iPhone - 'WebCore::CSSSelector()' Remote Crash

!/usr/bin/python , dM MMr 4MMML . MMMMM. xf . "M6MMM .MM- Mh.. +MM5MMM .MMMM .MMM. .MMMMML. MMMMMh MMMh. MM5MMM MMMMMMM 3MMMMx. 'MMM3MMf xnMMMMMM" 'MMMMM MMMMMM. nMMMMMMP" MMMMMx "MMM5M\ .MMMMMMM= MMMMMh "MMMMM" JMMMMMMP MMMMMM GMMMM. dMMMMMM . MMMMMM "MMMM .MMMMM .nnMP" .. MMMMx MMM" dMMMM"...

strongSwan IKE_SA_INIT and IKE_AUTH DoS Vulnerabilities

This host has installed strongSwan and is prone to Denial of Service Vulnerabilities. OpenVAS Vulnerability Test $Id: gbstrongswanmultdosvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ strongSwan IKESAINIT and IKEAUTH DoS Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone...

CVE-2009-1958

charon/sa/tasks/childcreate.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKEAUTH request without a 1 TSi or 2 TSr traffic selector...

FreeBSD : multiple vulnerabilities in ethereal (cdf18ed9-7f4a-11d8-9645-0020ed76ef5a)

Stefan Esser of e-matters Security discovered a baker's dozen of buffer overflows in Ethereal's decoders, including : - NetFlow - IGAP - EIGRP - PGM - IRDA - BGP - ISUP - TCAP - UCP In addition, a vulnerability in the RADIUS decoder was found by Jonathan Heusser. Finally, there is one uncredited...

Mandriva Update for libgnomeui2 MDVA-2008:100 (libgnomeui2)

Check for the Version of libgnomeui2 OpenVAS Vulnerability Test Mandriva Update for libgnomeui2 MDVA-2008:100 libgnomeui2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2008-6109

Robin Rawson-Tetley Animal Shelter Manager ASM before 2.2.2 does not properly enforce the privileges of user accounts, which allows local users to bypass intended access restrictions by 1 opening unspecified screens, related to the "double click selector bug"; or modifying a 2 animal, 3 owner, 4...

Cisco Security Advisory: Cisco Global Site Selector Appliances DNS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Global Site Selector Appliances DNS Vulnerability Advisory ID: cisco-sa-20090107-gss http://www.cisco.com/warp/public/707/cisco-sa-20090107-gss.shtml Revision 1.0 For Public Release 2009 January 07 1600 UTC GMT -...

Cisco Global Site Selector Appliances DoS

Crash on malformed DNS requests sequence...

CVE-2008-3819

dnsserver in Cisco Application Control Engine Global Site Selector GSS before 3.01 allows remote attackers to cause a denial of service daemon crash via a series of crafted DNS requests, aka Bug ID CSCsj70093...