CentOS 5 : nfs-utils (CESA-2009:1321)

An updated nfs-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nfs-utils package provides a daemon for the kernel NFS server and related tools. It was discovered that...

VideoCache 1.9.2 - vccleaner Local Privilege Escalation

VideoCache 1.9.2 - vccleaner Local Privilege Escalation ==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges...

CVE-2009-4329: Undefined Security Weakness

Unspecified vulnerability in the Engine Utilities component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service segmentation fault by modifying the db2ra data stream sent in a request from the Load Utility...

Mandriva Security Advisory MDVSA-2009:314 (apr)

The remote host is missing an update to apr announced via advisory MDVSA-2009:314. OpenVAS Vulnerability Test $Id: mdksa2009314.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:314 apr Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:290-1)

Security issues were identified and fixed in firefox 3.0.x : Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code...

RedHat Security Advisory RHSA-2009:1549

The remote host is missing updates announced in advisory RHSA-2009:1549. GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP. Daniel Stenberg reported that Wget is affected by the previously published null prefix attack, caused by incorrect handling of NULL characters in X.509...

osCommerce file_manager.php Arbitrary PHP Code Injection (intrusive check)

The version of osCommerce hosted on the remote web server allows a remote attacker to access the Admin filemanager utility without authentication. Further, this utility appears to allow arbitrary PHP code to be stored in files under the web server's document directory and then executed subject to...

Free COFEE Helps Law Enforcement Forensics

Microsoft has announced plans to give away free versions of its COFEE Computer Online Forensic Evidence Extractor utility to help law enforcement agencies in cyber-crime investigations. COFEE uses digital forensic technologies to help investigators gather evidence of live computer activity at the...

[SECURITY] Fedora 11 Update: rubygem-activesupport-2.3.2-2.fc11

Utility library which carries commonly used classes and goodies from the Rails framework...

GNU Tar PAX Extended Headers Handling Buffer Overflow (CVE-2006-0300)

The GNU tar program provides the ability to create and extract TAR archives along with various other kinds of manipulations. The program was initially designed to store files on magnetic tape, but has since then become a widely used archiving utility. A buffer overflow vulnerability exists in the...

DSA-1906-1 clamav - end-of-life announcement

Security support for clamav, an anti-virus utility for Unix, has been discontinued for the stable distribution lenny and the oldstable distribution etch. Clamav Upstream has stopped supporting the releases in etch and lenny. Also, it is not easily possible to receive signature updates for the vir...

[SECURITY] Fedora 10 Update: aria2-1.3.1-2.fc10

aria2 is a download utility with resuming and segmented downloading. Supported protocols are HTTP/HTTPS/FTP/BitTorrent. It also supports Metalink version 3.0. Currently it has following features: - HTTP/HTTPS GET support - HTTP Proxy support - HTTP BASIC authentication support - HTTP Proxy...

CVE-2009-3433

Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors...

Security feature bypass

Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors...

CVE-2009-3433

Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors...

CVE-2009-3433

Technical details about CVE-2009-3433 are not provided in the connected documents or initial description; information on affected components, root cause, and fixes is not publicly disclosed here. Monitor for updates.

[SECURITY] Fedora 11 Update: rubygem-activesupport-2.3.3-2.fc11

Utility library which carries commonly used classes and goodies from the Rails framework...

apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management

Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...

[SECURITY] Fedora 10 Update: rubygem-activesupport-2.1.1-2.fc10

Utility library which carries commonly used classes and goodies from the Rails framework...

SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 1163)

The Sun Java JRE /JDK 6 was updated to Update 15 fixing various security issues. - The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted applets and 2 Java...