SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 1163)

The Sun Java JRE /JDK 6 was updated to Update 15 fixing various security issues. - The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted applets and 2 Java...

[SECURITY] Fedora 10 Update: kdebase-workspace-4.3.1-1.fc10

The KDE Workspace consists of what is the desktop of the KDE Desktop Environment. This package contains: khotkeys a hotkey daemon klipper a cut & paste history utility kmenuedit the menu editor krandrtray resize and rotate X screens krunner a command run interface ksysguard a performance monitor...

Gentoo Security Advisory GLSA 200909-03 (apr apr-util)

The remote host is missing updates announced in advisory GLSA 200909-03. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

RedHat Security Advisory RHSA-2009:1341

The remote host is missing updates announced in advisory RHSA-2009:1341. The Cluster Manager cman utility provides services for managing a Linux cluster. Multiple insecure temporary file use flaws were found in fenceapcsnmp and ccstool. A local attacker could use these flaws to overwrite an...

RHEL 5 : nfs-utils (RHSA-2009:1321)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:1321 advisory. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that nfs-utils did not use tcpwrappers...

Server side request forgery (ssrf)

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to cause a denial of service hang or crash via invalid field length values in a malformed 1 document or 2 request...

CVE-2008-7113

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack...

Authorization

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password...

CVE-2008-7112

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to cause a denial of service hang or crash via invalid field length values in a malformed 1 document or 2 request...

Design/Logic Flaw

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 uses a small space of predictable user identification numbers for access control, which allows remote attackers to upload documents via a brute force attack...

Directory traversal

Directory traversal vulnerability in the Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to upload files to arbitrary locations via a .. dot dot in a request...

CVE-2008-7109

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password...

CVE-2008-7112

CVE-2008-7112 affects Kyocera Mita KM Scanner File Utility (aka listener) 3.3.0.1. The vulnerability arises from handling invalid field length values in a malformed document or request, allowing remote attackers to cause a denial of service (hang or crash). The description specifies remote exploi...

CVE-2008-7112

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to cause a denial of service hang or crash via invalid field length values in a malformed 1 document or 2 request...

CVE-2008-7111

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109...

CVE-2008-7113

The CVE-2008-7113 entry describes a vulnerability in Kyocera Mita KM Scanner File Utility (aka listener) version 3.3.0.1 where a small, predictable space of user IDs used for access control enables remote attackers to upload documents via a brute-force approach. The affected component is the Scan...

CVE-2008-7110

CVE-2008-7110 affects Kyocera Mita KM 3.3.0.1: the Scanner File Utility (aka listener) vulnerable to directory traversal via .. in a request, enabling remote upload of files to arbitrary locations. Related entries (CVE-2008-7111) indicate the tool does not restrict uploaded filenames or extension...

CVE-2008-7109

The Scanner File Utility aka listener in Kyocera Mita KM 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password...

CVE-2008-7111

The Scanner File Utility (aka listener) in Kyocera Mita KM 3.3.0.1 is vulnerable to directory traversal via a .. sequence in requests, allowing remote attackers to upload files to arbitrary locations. CVE-2008-7110 (and related CVEs) describe this behavior enabling arbitrary file write by crafted...

CVE-2008-7109

The CVE-2008-7109 entry affects Kyocera Mita KM 3.3.0.1: the Scanner File Utility (the listener) allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt for a password. This constitutes a remote, unauthenticated f...