3693 matches found
Low: Red Hat Security Advisory: lftp security and bug fix update
An updated lftp package that fixes one security issue and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. LFTP is a sophisticated file transfer program for the FTP and HTTP protocols. Lik...
High security hole in NullLogic Groupware
Hi, I've identified a couple of security flaws affecting the NullLogic Groupware which may allow compromise of accounts, denial of service or even remote code execution. These issues were reported by email to the developer but no response was forthcoming. Tim -- Tim Brown...
RHEL 4 / 5 : device-mapper-multipath (RHSA-2009:0411)
Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The device-mapper multipath packages provide tools to manage multipath...
device, kpartx security update
CentOS Errata and Security Advisory CESA-2009:0411 Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The device-mapper...
RedHat Update for IBMJava2 RHSA-2008:0133-01
Check for the Version of IBMJava2 OpenVAS Vulnerability Test RedHat Update for IBMJava2 RHSA-2008:0133-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
websvn-xssfhce.txt
WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS functionality used by WebSVN. The issue is caused by the following bit o...
DoS vulnerability in Google Chrome
Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Denial of Service уязвимости в Google Chrome. Данная уязвимость является частью моего проекта Day of bugs in browsers http://websecurity.com.ua/2453/. DoS: Эксплоит:...
easyrealtor-sql.txt
Original article: http://www.davidsopas.com/2008/09/sql-injection-in-easyrealtorpro/ "EasyRealtorPRO 2008 provides you with all features you need to setup your own business oriented real estate website on your own domain name. Our support team will install the script on your server and then you c...
Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1)
/ source: https://www.securityfocus.com/bid/29945/info The Linux kernel is prone to a local denial-of-service vulnerability caused by a race condition. Attackers can exploit this issue to cause the kernel to become unresponsive, denying service to legitimate users. / include include int mainint...
RHEL 2.1 : IBMJava2 (RHSA-2008:0133)
IBMJava2-JRE and IBMJava2-SDK packages that correct several security issues are available for Red Hat Enterprise Linux 2.1. IBM's 1.3.1 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. A buffer overflow was found in the Java Runtime Environment...
MDKA-2007:077 : console-tools
vt-is-UTF8 utility included in console-tools package, and used by Mandriva initscripts, can hang, causing random problems like preventing a local/remote system reboot, unless user take interactive action 27948. Also, when executed on a terminal different from a linux vt, it can cause errors and...
Progress OpenEdge 10b - Multiple Denial of Service Vulnerabilities
Progress OpenEdge 10b - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/23926/info OpenEdge is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits can allow attackers to cause the...
Progress WebSpeed 3.03.1 - Denial of Service
Progress WebSpeed 3.03.1 - Denial of Service //source: https://www.securityfocus.com/bid/23778/info // //WebSpeed is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. // //Successful exploits can allow attackers to cause the application to becom...
PulseAudio 0.9.5 - Assert() Remote Denial of Service
PulseAudio 0.9.5 - Assert Remote Denial of Service source: https://www.securityfocus.com/bid/23240/info PulseAudio is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to consume excessive system resources until the software becomes unresponsive to...
CVE-2005-4806: Undefined Security Weakness
Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service unresponsive service via unknown vectors...
HYSA-2006-008.txt
------------------------------------------------------ HYSA-2006-008 h4cky0u.org Advisory 017 ------------------------------------------------------ Date - Wed May 17 2006 TITLE: ====== myBloggie 2.1.3 CRLF & SQL Injection SEVERITY: ========= Medium SOFTWARE: ========= myBloggie 2.1.3...
HiveMail-1.3.txt
GulfTech Security Research February 10, 2006 Vendor : HiveMail URL : http://www.hivemail.com/ Version : HiveMail queryfirst" SELECT contacts FROM hivecontactgroup WHERE contactgroupid = $contactgroupid AND userid = $hiveuseruserid ";...
High Risk Vulnerability in Lexmark Printer Sharing Service
Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability in the Lexmark Printer Sharing service which could allow a remote, unauthenticated attacker to execute arbitrary code on a Lexmark printer user's computer system with Local System privileges. There is no known official pat...
Ubuntu 4.10 : gaim vulnerabilities (USN-85-1)
The Gaim developers discovered that the HTML parser did not sufficiently validate its input. This allowed a remote attacker to crash the Gaim client by sending certain malformed HTML messages. CAN-2005-0208, CAN-2005-0473 Another lack of sufficient input validation was found in the 'Oscar' protoc...