[SECURITY] Fedora 16 Update: clearsilver-0.10.5-15.fc16

ClearSilver is a fast, powerful, and language-neutral HTML template system. In both static content sites and dynamic HTML applications, it provides a separation between presentation code and application logic which makes working with your project easier. The design of ClearSilver began in 1999, a...

[SECURITY] Fedora 15 Update: clearsilver-0.10.5-15.fc15

ClearSilver is a fast, powerful, and language-neutral HTML template system. In both static content sites and dynamic HTML applications, it provides a separation between presentation code and application logic which makes working with your project easier. The design of ClearSilver began in 1999, a...

Fedora 16 : phpMyAdmin-3.4.8-1.fc16 (2011-16768)

Changes for 3.4.8.0 2011-12-01 : - interface enum data split at space char more space to edit - interface ENUM/SET editor can't handle commas in values - interface no links to browse/empty views and tables - interface Deleted search results remain visible - import ODS import ignores memory limits...

OpenSSH < 4.5 Multiple Vulnerabilities

According to its banner, the remote host is running a version of OpenSSH prior to 4.5. Versions before 4.5 are affected by the following vulnerabilities : - A client-side NULL pointer dereference, caused by a protocol error from a malicious server, which could cause the client to crash...

Portable OpenSSH < 3.8p1 Multiple Vulnerabilities

According to its banner, a version of OpenSSH earlier than 3.8p1 is running on the remote host and is affected by the following issues: - There is an issue in the handling of PAM modules in such versions of OpenSSH. As a result, OpenSSH may not correctly handle aborted conversations with PAM...

DigiNotar Voluntarily Files Bankruptcy

DigiNotar, the embattled Dutch certificate authority at the center of a global scandal after issuing hundreds of forged digital certificates has filed for voluntary bankruptcy today, according to a press release from parent company VASCO. DigiNotar will cease business operations and will be manag...

Microsoft Internet Explorer CVE-2010-3348 Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access content from a browser window in another domain or security zone. This may...

kernel: mm: keep a guard page below a grow-down stack segment

The doanonymouspage function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to t...

Security-Assessment.com Advisory: BroadWorks Call Detail Record Disclosure Vulnerability

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Name : BroadWorks Call Detail Record Disclosure Vulnerability Vendor Website : http://broadsoft.com/products/broadworks/ Date Released : November 2, 2010 Affected Software: BroadWor...

BroadWorks Arbitrary Call Detail Record Eavesdropping

, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Name : BroadWorks Arbitrary Call Detail Record Eavesdropping Vendor Website : http://broadsoft.com/products/broadworks/ Date Released : November 2, 2010...

Mandriva Update for kernel MDVSA-2010:172 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:172 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2010-2240

The doanonymouspage function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to t...

kernel: mm: keep a guard page below a grow-down stack segment

The doanonymouspage function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to t...

Do You Know What Your Database Users Are Doing?

In our last column, we focused on privilege escalation attacks, and the impact that this category of SQL injection attacks can have on the database – particularly where specific database vulnerabilities exist, and can be exploited through the manipulation of privileges. Let’s look more deeply at...

kernel: mm: keep a guard page below a grow-down stack segment

The doanonymouspage function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to t...

PT-2010-1049 · Red Hat +2 · Red Hat Enterprise Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.27.52 Linux kernel versions 2.6.32.x prior to 2.6.32.19 Linux kernel versions 2.6.34.x prior to 2.6.34.4 Linux kernel versions 2.6.35.x prior to 2.6.35.2 Red Hat Enterprise Linux kernel versions 2.4.21...

CVE-2010-2240

The doanonymouspage function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the stack and the heap, which allows context-dependent attackers to execute arbitrary code by writing to t...

Researchers Release Capsicum, New Sandbox Framework

As applications have become more and more complex in recent years and Web browsers have evolved into operating systems unto themselves, the task of securing desktop environments has become increasingly difficult. And while there’s been quite a bit of innovation on Windows security, advances in Un...

FreeBSD Security Advisory (FreeBSD-SA-10:04.jail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:04.jail.asc ADV FreeBSD-SA-10:04.jail.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:04.jail.asc Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...

I Have Only One Security Prediction for 2010

Instead of the usual top ten lists that are all-too-common with predictions for the new year, I have just one: 2010 will be the year of desktop applications handling untrusted data in sandboxed processes, and it will be about time. Since the release of Windows XP SP2, there have been significantl...