[Full-disclosure] Advisory 22/2005: Multiple vulnerabilities in phpSysInfo

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in phpSysInfo Release Date: 2005/11/13 Last Modified: 2005/11/12 Author: Christopher Kunz [email protected] Application: phpSysInfo 2....

USN-206-2: Fixed lynx packages for USN-206-1

USN-206-1 fixed a security vulnerability in lynx. Unfortunately the fix contained an error that caused lynx to crash under certain circumstances. The updated packages fix this...

RHEL 4 : Updated kernel packages available for Red Hat Enterprise Linux 4 Update 2 (Important) (RHSA-2005:514)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:514 advisory. The Linux kernel handles the basic functions of the operating system. This is the second regular kernel update to Red Hat Enterprise Linux 4...

Mandrake Linux Security Advisory : ucd-snmp (MDKSA-2005:137)

A Denial of Service vulnerability was discovered in the way that ucd-snmp uses network stream protocols. A remote attacker could send a ucd-snmp agent a specially crafted packet that would cause the agent to crash. The updated packages have been patched to correct this problem. %NASLMINLEVEL 7030...

RHEL 4 : firefox (RHSA-2005:768)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:768 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox processes certain international domain names. An attacker could crea...

RHEL 4 : cvs (RHSA-2005:756)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:756 advisory. CVS Concurrent Version System is a version control system. An insecure temporary file usage was found in the cvsbug program. It is possible that a loc...

[Full-disclosure] Secunia Research: SqWebMail Conditional Comments Script Insertion Vulnerability

====================================================================== Secunia Research 06/09/2005 - SqWebMail Conditional Comments Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...

RHEL 2.1 : slocate (RHSA-2005:747)

An updated slocate package that fixes a denial of service issue is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a nightly-updated central...

Solaris 10 (sparc) : 119593-01

SunOS 5.10: net-svc patch. Date this patch was last updated by Sun : Aug/08/05 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 8 (x86) : 118668-86

JavaSE 5.0x86: update 85 patch equivalent to JDK 5.0u85. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

RHEL 4 : firefox (RHSA-2005:586)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:586 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content...

Solaris 9 (x86) : 119450-02

SunOS 5.9x86: Perl Patch. Date this patch was last updated by Sun : Mar/31/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

[Full-disclosure] Advisory 04/2005: Cacti Remote Command Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened - PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Cacti Remote Command Execution Vulnerability Release Date: 2005/07/01 Last Modified: 2005/07/01 Author: Stefan Esser [email protected] Application: Cacti = 0.8.6e...

[SA15344] 1Two News Script Insertion and Authentication Bypass

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: 1Two News Script Insertion and Authentication Bypass...

Solaris 9 (sparc) : 112911-16

SunOS 5.9: ifconfig Patch. Date this patch was last updated by Sun : May/27/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Mandrake Linux Security Advisory : gdk-pixbuf (MDKSA-2005:069)

A bug was discovered in the way that gdk-pixbuf processes BMP images which could allow for a specially crafted BMP to cause a Denial of Service attack on applications linked against gdk-pixbuf. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network...

Solaris 8 (sparc) : 116993-01

SunOS 5.8: /usr/bin/newgrp patch. Date this patch was last updated by Sun : Mar/10/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Mandrake Linux Security Advisory : kdegraphics (MDKSA-2005:052)

Previous updates to correct integer overflow issues affecting xpdf overlooked certain conditions when built for a 64 bit platform. formerly CVE-2004-0888. This also affects applications like kdegraphics, that use embedded versions of xpdf. CVE-2005-0206 In addition, previous libtiff updates...

mod_python vulnerable to information disclosure via crafted URL

Overview The Apache modpython module is vulnerable to unintended remote information disclosure using specially crafted URLs. Description From the modpython web page:Modpython is an Apache module that embeds the Python interpreter within the server. With modpython you can write web-based...

Important: Red Hat Security Advisory: cups security update

Updated cups packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS is a print spooler. During a source code audit, Chris Evans discovered a number of integer...