AIX 530005 : U811555

The remote host is missing AIX PTF U811555 which is related to the security of the package csm.pe.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610000 : U813937

The remote host is missing AIX PTF U813937 which is related to the security of the package ndaf.base.server You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530005 : U810463

The remote host is missing AIX PTF U810463 which is related to the security of the package bos.rte.filesystem You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

FreeBSD Security Advisory FreeBSD-SA-07:09.random

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:09.random Security Advisory The FreeBSD Project Topic: Random value disclosure Category: core Module: sysdevrandom Announced: 2007-11-29 Credits: Robert Woolle...

[Full-disclosure] [USN-475-1] evolution-data-server vulnerability

=========================================================== Ubuntu Security Notice USN-475-1 June 21, 2007 evolution-data-server vulnerability CVE-2007-3257 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu...

[USN-348-1] GnuTLS vulnerability

=========================================================== Ubuntu Security Notice USN-348-1 September 18, 2006 gnutls11, gnutls12 vulnerability CVE-2006-4790 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.1...

Low: Red Hat Enhancement Advisory: oprofile enhancement update

An oprofile enhancement update that provides support for POWER5+ and uses the current event names for POWER4 and POWER5 is now available. The oprofile package contains a profiling system for systems running the Linux kernel. Profiling runs transparently in the background while profile data is...

[USN-297-3] Thunderbird vulnerabilities

=========================================================== Ubuntu Security Notice USN-297-3 July 26, 2006 mozilla-thunderbird vulnerabilities CVE-2006-2775, CVE-2006-2776, CVE-2006-2778, CVE-2006-2779, CVE-2006-2780, CVE-2006-2781, CVE-2006-2783, CVE-2006-2784, CVE-2006-2787...

[Full-disclosure] [USN-308-1] shadow vulnerability

=========================================================== Ubuntu Security Notice USN-308-1 July 05, 2006 shadow vulnerability =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.10 Ubuntu 6.06 LTS This advisory...

[USN-301-1] kdm vulnerability

=========================================================== Ubuntu Security Notice USN-301-1 June 14, 2006 kdebase vulnerability CVE-2006-2449 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.10 Ubuntu 6.06 LT...

p-smash DoS (ICMP 9 flood)

It was possible to crash the remote machine by flooding it with ICMP type 9 packets. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only According ...

[USN-156-1] TIFF vulnerability

=========================================================== Ubuntu Security Notice USN-156-1 July 29, 2005 tiff vulnerability https://bugzilla.ubuntu.com/showbug.cgi?id=12008 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu...

FreeBSD-SA-05:15.tcp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:15.tcp Security Advisory The FreeBSD Project Topic: TCP connection stall denial of service Category: core Module: inet Announced: 2005-06-29 Credits: Noritoshi...

FreeBSD-SA-05:14.bzip2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:14.bzip2 Security Advisory The FreeBSD Project Topic: bzip2 denial of service and permission race vulnerabilities Category: contrib Module: contribbzip2...

FreeBSD Security Advisory FreeBSD-SA-05:02.sendfile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:02.sendfile Security Advisory The FreeBSD Project Topic: sendfile kernel memory disclosure Category: core Module: syskern Announced: 2005-04-04 Credits: Sven...

DSA-609-1 atari800 - buffer overflows

Bulletin has no description...

Ruby: CGI::Session creates files insecurely

Background Ruby is an Object Oriented, interpreted scripting language used for many system scripting tasks. It can also be used for CGI web applications. Description The CGI::Session::FileStore implementation and presumably CGI::Session::PStore, which allow data associated with a particular Sessi...

Gallery: Arbitrary command execution

Background Gallery is a PHP script for maintaining online photo albums. Description The upload handling code in Gallery places uploaded files in a temporary directory. After 30 seconds, these files are deleted if they are not valid images. However, since the file exists for 30 seconds, a carefull...

GLSA-200403-06 : Multiple remote buffer overflow vulnerabilities in Courier

The remote host is affected by the vulnerability described in GLSA-200403-06 Multiple remote buffer overflow vulnerabilities in Courier The vulnerabilities have been found in the 'SHIFTJIS' converter in 'shiftjis.c' and 'ISO2022JP' converter in 'so2022jp.c'. An attacker may supply Unicode...

gv: Exploitable Buffer Overflow

Background gv is a PostScript and PDF viewer for X which provides a user interface for the ghostscript interpreter. Description gv contains a buffer overflow vulnerability where an unsafe sscanf call is used to interpret PDF and PostScript files. Impact By enticing a user to view a malformed PDF ...