[SECURITY] [DSA 1396-1] New iceweasel packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1396-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 27th, 2007 http://www.debian.org/security/faq -...

DSA-1396-1 iceweasel

Bulletin has no description...

CVE-2003-1448

The CVE-2003-1448 issue affects the Windows 2000 kernel, where a memory leak can be exploited by remote attackers to cause a denial of service through SMB by sending a NetBIOS continuation packet. The description explicitly states a DoS condition (SMB request hang). No specific affected product v...

CVE-2003-1448

Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service SMB request hang via a NetBIOS continuation packet...

CVE-2007-5337

Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs...

openSUSE 10 Security Update : links (links-2292)

Malicious websites could abuse smb:// URLs to read or write arbitrary files of the user CVE-2006-5925. Therefore this update disables SMB support in links. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

SMB NULL Session Authentication

The remote host is running and SMB protocol. It is possible to log into the browser or spoolss pipes using a NULL session i.e., with no login or password. Depending on the configuration, it may be possible for an unauthenticated, remote attacker to leverage this issue to get information about the...

Unauthenticated SMB Access Permitted (Arbitrary Credential Acceptance)

The remote host is running one of the Microsoft Windows operating systems or the SAMBA daemon. It was possible to log into it as a guest user, or a guest-like user, using a random account. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid26919; scriptversion"1.21";...

Microsoft Windows SMB Blank Administrator Password

The remote host is running one of the Microsoft Windows operating systems. It was possible to log into it using the administrator account with a blank password. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid26918; scriptversion"1.20"; scriptcvsdate"Date: 2018/07/27...

Moderate: elinks security update

0.9.2-3.3.5.2 - fix elinks-0.9.2-httpspostdata.patch 303881 0.9.2-3.3.5.1 - fix 297611 - CVE-2007-5034 elinks reveals POST data to HTTPS proxy 0.9.2-3.3 - fix 215731 - elinks smb protocol arbitrary file access...

VMware Workstation Detection

VMware Workstation, an OS virtualization solution for Desktops and Laptops that allows the running of multiple operating systems on the same host, is installed on the remote host. C Tenable, Inc. include"compat.inc"; if description scriptid26201; scriptversion"1.23";...

[SECURITY] Fedora 7 Update: samba-3.0.26a-0.fc7

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

CVE-2006-1863

Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\" sequences, a similar vulnerability to CVE-2006-1864...

Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability

Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...

Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability

Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...

Internet Explorer tblinf32.dll ActiveX IObjectsafety vulnerability

Added: 08/17/2007 CVE: CVE-2007-2216 BID: 25289 OSVDB: 36396 Background The IObjectsafety interface provides methods to get and set safety options for objects which support untrusted clients. Problem The tblinf32.dll ActiveX control implements IObjectsafety incorrectly, allowing execution of code...

lsa_transnames_heap-osx.rb.txt

$Id: lsatransnamesheap.rb 5059 2007-07-24 23:44:44Z ramon $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

lsa_transnames_heap-linux.rb.txt

$Id: lsatransnamesheap.rb 4984 2007-06-09 02:25:31Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

lsa_transnames_heap-solaris.rb.txt

$Id: lsatransnamesheap.rb 5046 2007-07-12 00:41:00Z ramon $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

iDefense Security Advisory 07.17.07: Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities

Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities iDefense Security Advisory 07.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 17, 2007 I. BACKGROUND Computer Associates Alert Notification Server is used by several CA products, including eTru...