Fedora 12 : proftpd-1.3.3c-1.fc12 (2010-17220)

This is an update to the current upstream maintenance release, which addresses two security issues that can be exploited by malicious users to manipulate certain data and compromise a vulnerable system. - A logic error in the code for processing user input containing the Telnet IAC Interpret As...

Expert Advises Caution on SCADA Security Hysteria

TORONTO–The months-long hysteria over Stuxnet and its hyper-sophistication and passel of unknown vulnerabilities has had the effect of creating a secondary wave of panic about the vulnerability of industrial control and SCADA systems. But the concern about spontaneous utility outages and...

[SECURITY] Fedora 12 Update: apr-util-1.3.10-1.fc12

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6617)

The Mozilla XULRunner engine was updated to version 1.9.0.15 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to...

Design/Logic Flaw

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

CVE-2010-1623

The CVE-2010-1623 issue affects the APR-util library (apr_brigade_split_line in buckets/apr_brigade.c) prior to version 1.3.10, where a memory leak can allow remote attackers to cause denial of service through memory consumption related to APR bucket destruction. Affected products commonly includ...

CVE-2010-1623

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

Apache 2.2.14.0 Bench command line utility contextmenu.exe DLL Hijacking

Exploit for windows platform in category local exploits ======================================================================== Apache 2.2.14.0 Bench command line utility contextmenu.exe DLL Hijacking ========================================================================...

[SECURITY] Fedora 13 Update: bzip2-1.0.6-1.fc13

Bzip2 is a freely available, patent-free, high quality data compressor. Bzip2 compresses files to within 10 to 15 percent of the capabilities of the best techniques available. However, bzip2 has the added benefit of being approximately two times faster at compression and six times faster at...

CentOS Update for samba CESA-2010:0697 centos4 i386

Check for the Version of samba OpenVAS Vulnerability Test CentOS Update for samba CESA-2010:0697 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS 3 / 4 / 5 : samba (CESA-2010:0697)

Updated samba packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common...

libsmbclient, samba security update

CentOS Errata and Security Advisory CESA-2010:0697 Updated samba packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this...

Critical: Red Hat Security Advisory: samba security and bug fix update

Updated samba packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.3, and 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common...

Device Information (devinfo.xml)

It was possible to download the file 'devinfo.xml' from the remote web server. This file is intended to be read by a setup utility. It contains a description of the device, installation instructions and sometimes credentials for an Internet subscription. C Tenable Network Security, Inc...

Windows 7 / Vista Backup Utility sdclt.exe fveapi.dll DLL Hijacking Exploit

/ Windows 7 and Vista Backup Utility sdclt.exe fveapi.dll DLL Hijacking Exploit Found by: Christian Heinrich cmlh Exploit by: Christian Heinrich cmlh Email: [email protected] Web: http://www.twitter.com/cmlh Summary: Microsoft Windows Backup application sdclt.exe for Windows Vista/7...

Windows 7 / Vista Backup Utility sdclt.exe fveapi.dll DLL Hijacking

Exploit for windows platform in category local exploits =================================================================== Windows 7 / Vista Backup Utility sdclt.exe fveapi.dll DLL Hijacking =================================================================== / Windows 7 and Vista Backup Utility...

sFileManager 24a - Local File Inclusion

sFileManager 24a - Local File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= sFileManager eNYe-Sec - www.enye-sec.org - www.pepelux.org ----- by the author ----- Simple File Manager SFM is a web based file management utility. It is designed to be used by those that don't wan...

MDVA-2009:114 : logcheck

The logcheck package shipped in mandriva 2009.1 had two issues, preventing it to run properly: - its configuration directory /etc/logcheck is not readable with the identity used for running logcheck - it uses run-parts utility with unsupported --list option %NASLMINLEVEL 70300 @DEPRECATED@ This...

MDVA-2010:161 : findutils

The find utility in Mandriva Linux 2010.0 could give bogus 'No such file or directory' messages, when run from msec application. This advisory updates the find application to the latest available version, fixing this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

GSM SIM Utility Local Exploit Direct Ret ver.

No description provided by source. Exploit Title : GSM SIM Utility Local Exploit Direct Ret ver. Date : July 07, 2010 Author : chap0 www.seek-truth.net Download Link : http://download.cnet.com/GSM-SIM-Utility/3000-185084-10396246.html?tag=mncol Version : 5.15 OS : Windows XP SP3 Greetz to : Corel...