Mandriva Linux Security Advisory : libcdio (MDVSA-2008:037)

A stack-based buffer overflow was discovered in libcdio that allowed context-dependent attackers to cause a denial of service core dump and possibly execute arbitrary code via a disk or image file that contains a long joliet file name. In addition, a fix for failed UTF-8 conversions that would...

Ubuntu 8.10 : OpenJDK vulnerabilities (USN-713-1)

It was discovered that Java did not correctly handle untrusted applets. If a user were tricked into running a malicious applet, a remote attacker could gain user privileges, or list directory contents. CVE-2008-5347, CVE-2008-5350 It was discovered that Kerberos authentication and RSA public key...

Mandriva Linux Security Advisory : tomcat5 (MDVSA-2008:188)

A number of vulnerabilities have been discovered in the Apache Tomcat server : The default catalina.policy in the JULI logging component did not restrict certain permissions for web applications which could allow a remote attacker to modify logging configuration options and overwrite arbitrary...

CentOS 3 / 4 : php (CESA-2006:0730)

Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. The Hardened-PHP Project discovered an...

Mandriva Update for rpmdrake MDVA-2008:042 (rpmdrake)

Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2008:042 rpmdrake Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for webmin MDVA-2008:041 (webmin)

Check for the Version of webmin OpenVAS Vulnerability Test Mandriva Update for webmin MDVA-2008:041 webmin Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for libcdio MDVSA-2008:037 (libcdio)

Check for the Version of libcdio OpenVAS Vulnerability Test Mandriva Update for libcdio MDVSA-2008:037 libcdio Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for rpmdrake MDVA-2008:042 (rpmdrake)

Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2008:042 rpmdrake Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for hplip MDVA-2008:157 (hplip)

Check for the Version of hplip OpenVAS Vulnerability Test Mandriva Update for hplip MDVA-2008:157 hplip Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for initscripts MDKA-2007:134 (initscripts)

Check for the Version of initscripts OpenVAS Vulnerability Test Mandriva Update for initscripts MDKA-2007:134 initscripts Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for gdm MDKA-2007:116 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDKA-2007:116 gdm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for webmin MDVA-2008:041 (webmin)

Check for the Version of webmin OpenVAS Vulnerability Test Mandriva Update for webmin MDVA-2008:041 webmin Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for gdm MDKA-2007:116 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDKA-2007:116 gdm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for libcdio MDVSA-2008:037 (libcdio)

Check for the Version of libcdio OpenVAS Vulnerability Test Mandriva Update for libcdio MDVSA-2008:037 libcdio Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841)

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for other applications...

CVE-2009-1046

The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service memory corruption by selecting a small number of 3-byte UTF-8 characters, which...

CVE-2009-1046

The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service memory corruption by selecting a small number of 3-byte UTF-8 characters, which...

Memory corruption

The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service memory corruption by selecting a small number of 3-byte UTF-8 characters, which...

CVE-2009-1046

CVE-2009-1046 affects the Linux kernel (2.6.28 prior to 2.6.28.4, 2.6.25, and possibly earlier). When the UTF-8 console is used, selecting certain 3-byte UTF-8 characters can trigger an off-by-two memory error, leading to memory corruption and a possible denial of service. The impact is described...

Ubuntu: Security Advisory (USN-552-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...