CVE-2009-0180

Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376...

Debian: Security Advisory (DSA-1684-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5532

Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt...

Design/Logic Flaw

Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt...

CVE-2008-5532

Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt...

CVE-2008-5532

CVE-2008-5532 documents a bypass of malware detection in HTML carried out by Ikarus Virus Utilities (T3.1.1.45.0 and possibly T3.1.1.34.0) when used with Internet Explorer 6 or 7. The vulnerability stems from an attacker placing an MZ header (the “EXE info”) at the beginning of a document and ren...

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service CPU consumption via a crafted HTTP request...

[SECURITY] Fedora 8 Update: bluez-utils-3.35-3.fc8

Bluetooth utilities bluez-utils: - hcitool - hciattach - hciconfig - hcid - l2ping - start scripts Red Hat - pcmcia configuration files The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

DEBIAN-CVE-2008-4552

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...

CVE-2008-4552

The goodclient function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hostsctl function with the wrong order of arguments, which causes TCP Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions...

SuSE 10 Security Update : Bluetooth utilities (ZYPP Patch Number 5437)

Missing length checks in bluez-libs could cause a buffer overflow in Bluetooth applications. Malicious bluetooth devices could potentially exploit that to execute arbitrary code. CVE-2008-2374 Note: The source code of each application that uses vulnerable functions of bluez-libs needs to be adapt...

[SECURITY] Fedora 9 Update: gnome-packagekit-0.2.5-2.fc9

packagekit-gnome provides session applications for the PackageKit API. There are several utilities designed for installing, updating and removing packages on your system...

[SECURITY] Fedora 9 Update: bluez-utils-3.35-3.fc9

Bluetooth utilities bluez-utils: - hcitool - hciattach - hciconfig - hcid - l2ping - start scripts Red Hat - pcmcia configuration files The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

CVE-2008-2101

CVE-2008-2101 affects VMware ESX/VCB: the VCB command-line utilities for ESX 3.0.1–3.0.3 and ESX 3.5 pass the password on the command line, enabling local users to obtain credentials by inspecting the process list. The issue is addressed by VMware patches (VCB/ESX updates) for ESX 3.0.1–3.0.3 and...

nfs-utils: missing tcp_wrappers support

A certain Red Hat build script for nfs-utils before 1.0.9-35z.el52 on Red Hat Enterprise Linux RHEL 5 omits TCP wrappers support, which might allow remote attackers to bypass intended access restrictions...

Low: Red Hat Security Advisory: coreutils security update

Updated coreutils packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. The coreutils package contains the core GNU utilities. It is the combination of the old GNU...

PT-2008-1075 · Bluez +1 · Bluez-Libs-Devel +4

Name of the Vulnerable Software and Affected Versions: bluez-libs versions 3.30 through 3.33 bluez-utils versions 3.30 through 3.33 bluez-libs-devel versions 2.10 through 3.33 bluez-utils-cups versions 2.10 through 3.7 bluez-utils versions prior to 3.36 Description: The issue is related to the...

GLSA-200806-05 : cbrPager: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-05 cbrPager: User-assisted execution of arbitrary code Mamoru Tasaka discovered that filenames of the image archives are not properly sanitized before being passed to decompression utilities like unrar and unzip, which use...

[SECURITY] Fedora 8 Update: util-linux-ng-2.13.1-2.fc8

The util-linux-ng package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program...

DEBIAN-CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...