GLSA-200411-13 : Portage, Gentoolkit: Temporary file vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200411-13 Portage, Gentoolkit: Temporary file vulnerabilities dispatch-conf and qpkg use predictable filenames for temporary files. Impact : A local attacker could create symbolic links in the temporary files directory, pointing t...

[SA12842] CyberStrong eShop ASP Shopping Card Unspecified Cross-Site Scripting

TITLE: CyberStrong eShop ASP Shopping Card Unspecified Cross-Site Scripting SECUNIA ADVISORY ID: SA12842 VERIFY ADVISORY: http://secunia.com/advisories/12842/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CyberStrong eShop 4.x http://secunia.com/product/1805/...

GLSA-200408-05 : Opera: Multiple new vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200408-05 Opera: Multiple new vulnerabilities Multiple vulnerabilities have been found in the Opera web browser. Opera fails to deny write access to the 'location' browser object. An attacker can overwrite methods in this object a...

Low: Red Hat Security Advisory: gnome-vfs security update

Updated GNOME VFS packages that remove potential extfs-related vulnerabilities are now available. GNOME VFS is the GNOME virtual file system. It provides a modular architecture and ships with several modules that implement support for file systems, HTTP, FTP, and others. The extfs backends make i...

Subversion: Vulnerability in mod_authz_svn

Background Subversion is an advanced version control system, similar to CVS, which supports additional functionality such as the ability to move, copy and delete files and directories. A Subversion server may be run as an Apache module, a standalone server svnserve, or on-demand over ssh a la CVS...

Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer

NGSSoftware Insight Security Research Advisory Name: RealPlayer & RealOne Player Buffer Overruns Systems Affected: RealOne Player, RealOne Player v2, RealOne Enterprise Desktop / RealPlayer Enterprise all language versions, all platforms Severity: High Risk Vendor URL: http://www.real.com/ Author...

Siemens Mobile Phone Buffer overflow

====================================== --- Product : Siemens Mobile Phone --- Version : All 45 series phones --- OffSite : www.siemens-mobile.com --- Problem : Buffer Overflow. ====================================== General Description В телефонах Siemens серии 45, мною была найдена еще одна...

Oliver Debon Flash plug-in vulnerable to buffer overflow processing incorrectly formatted sound file

Overview When passed an incorrectly formatted sound file, the Oliver Debon freeware Flash plug-in is reportedly vulnerable to a buffer overflow. Description The DefineSound tag in a sound file passes data to a Flash plug-in. If this tag specifies fewer samples than are actually present in the dat...

MIT Kerberos 5 ksu may allow either the '-r' or '-l' time-interval parameter to overflow the stack with the characters ''d', 'h', 'm', or 's'

Overview Description From the reporter: Time-interval parsing for the "-r" and "-l" command-line options calls a library routine which uses sscanf"%d%d" and passes the address of an automatic int variable to correspond to the second %-sequence. But the % sequence needs an arbitrarily large string...

FreeBSD-SA-00:48.xchat

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:48 Security Advisory FreeBSD, Inc. Topic: xchat port inappropriately handles URLs Category: ports Module: xchat, xchat-devel Announced: 2000-09-13 Affects: Ports...

SCX-SA-01.txt

===================================================================== Securax-SA-01 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Ms Windows '95/'98/SE will crash upon parsing special crafted path-strings refering ...

DUO-PSA-2015-003: Duo Product Security Advisory

Duo Product Security Advisory Advisory ID: DUO-PSA-2015-003 Original Publication Date: 2015-08-06 Revision Date: 2015-08-10 Status: Confirmed, Fixed Document Revision: 2 Overview Duo Security has identified an issue which, under certain configurations, could have enabled attackers to bypass...