5481 matches found
CVE-2010-0184
Summary: CVE-2010-0184 affects the (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility within TIBCO Runtime Agent prior to 5.6.2 . The vulnerability is due to weak permissions on domain properties files, which could allow local users to obtain domain administrator creden...
CVE-2009-4607
The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to...
CentOS 5 : nfs-utils (CESA-2009:1321)
An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...
VideoCache 1.9.2 - vccleaner Local Privilege Escalation
VideoCache 1.9.2 - vccleaner Local Privilege Escalation ==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges...
Mandriva Security Advisory MDVSA-2009:314 (apr)
The remote host is missing an update to apr announced via advisory MDVSA-2009:314. OpenVAS Vulnerability Test $Id: mdksa2009314.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:314 apr Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Mandriva Linux Security Advisory : firefox (MDVSA-2009:290-1)
Security issues were identified and fixed in firefox 3.0.x : Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code...
RedHat Security Advisory RHSA-2009:1549
The remote host is missing updates announced in advisory RHSA-2009:1549. GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP. Daniel Stenberg reported that Wget is affected by the previously published null prefix attack, caused by incorrect handling of NULL characters in X.509...
osCommerce file_manager.php Arbitrary PHP Code Injection (intrusive check)
The version of osCommerce hosted on the remote web server allows a remote attacker to access the Admin filemanager utility without authentication. Further, this utility appears to allow arbitrary PHP code to be stored in files under the web server's document directory and then executed subject to...
Free COFEE Helps Law Enforcement Forensics
Microsoft has announced plans to give away free versions of its COFEE Computer Online Forensic Evidence Extractor utility to help law enforcement agencies in cyber-crime investigations. COFEE uses digital forensic technologies to help investigators gather evidence of live computer activity at the...
[SECURITY] Fedora 11 Update: rubygem-activesupport-2.3.2-2.fc11
Utility library which carries commonly used classes and goodies from the Rails framework...
DSA-1906-1 clamav - end-of-life announcement
Security support for clamav, an anti-virus utility for Unix, has been discontinued for the stable distribution lenny and the oldstable distribution etch. Clamav Upstream has stopped supporting the releases in etch and lenny. Also, it is not easily possible to receive signature updates for the vir...
GNU Tar PAX Extended Headers Handling Buffer Overflow (CVE-2006-0300)
The GNU tar program provides the ability to create and extract TAR archives along with various other kinds of manipulations. The program was initially designed to store files on magnetic tape, but has since then become a widely used archiving utility. A buffer overflow vulnerability exists in the...
[SECURITY] Fedora 10 Update: aria2-1.3.1-2.fc10
aria2 is a download utility with resuming and segmented downloading. Supported protocols are HTTP/HTTPS/FTP/BitTorrent. It also supports Metalink version 3.0. Currently it has following features: - HTTP/HTTPS GET support - HTTP Proxy support - HTTP BASIC authentication support - HTTP Proxy...
CVE-2009-3433
Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors...
Security feature bypass
Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors...
CVE-2009-3433
Technical details about CVE-2009-3433 are not provided in the connected documents or initial description; information on affected components, root cause, and fixes is not publicly disclosed here. Monitor for updates.
CVE-2009-3433
Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors...
[SECURITY] Fedora 11 Update: rubygem-activesupport-2.3.3-2.fc11
Utility library which carries commonly used classes and goodies from the Rails framework...
apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management
Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...