Fedora Core 10 FEDORA-2009-5513 (jetty)

The remote host is missing an update to jetty announced via advisory FEDORA-2009-5513. OpenVAS Vulnerability Test $Id: fcore20095513.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5513 jetty Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Repository Security improvement - the default for creating a new repository should be restricted to admins until specifically configured.

I just noticed that when setting up repositories, they were created with 'default' which mean if public sign up was on, they were able to see the repos. For the sake of security, a fresh install should default to restricting access to admins, perhaps through a default-created group 'admins'. Anon...

Cygwin包处理存在安全漏洞

CVE ID：CVE-2008-3323 CNCVE ID：CNCVE-20083323 Cygwin是一款运行于Windows下的免费的UNIX的子系统。 Cygwin存在安全问题，远程攻击者可以利用漏洞破坏受影响系统。 Tarball软件包通过setup.exe安装和升级，通过明文HTTP或FTP从镜像下载包列表和包存在问题，包列表中博阿含MD5校验来验证包的完整性，如果伪造的服务器回答负责包升级的HTTP请求并使用修改的MD5字符串进行响应， setup.exe就会下载和安装恶意包，导致任意代码以登录用户进程权限执行。 要成功利用此漏洞需要攻击者伪造镜像或进行DNS伪造攻击。...

Fedora 7 : emacs-22.1-5.fc7 (2007-3056)

Tue Nov 6 2007 Chip Coldwell - 22.1-5 - fix insufficient safe-mode checks Resolves: bz367581 - Update rpm-spec-mode to the current upstream, drop compat patch bz306841 - Wed Sep 12 2007 Chip Coldwell - 22.1-4 - require xorg-x11-fonts-ISO8859-1-100dpi instead of 75dpi Resolves: bz281861 - drop...

PT-2006-5448 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.16 through 2.6.17.11 Description: The issue concerns weak permissions in the source code tar archive of the Linux kernel, potentially allowing local users to insert malicious code that could be used during the next...