Ubuntu 8.04 LTS : samba vulnerability (USN-1374-1)

Andy Davis discovered that Samba incorrectly handled certain AndX offsets. A remote attacker could send a specially crafted request to the server and cause a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block...

Cloupia End-To-End FlexPod Management Directory Traversal

Cloupia End-to-end FlexPod Management - Directory Traversal Vulnerability Advisory Information Advisory ID: KUSTODIAN-2011-011 Date published: Jan 13, 2011 Vulnerability Information Class: Directory Traversal Remotely Exploitable: Yes Locally Exploitable: Yes Software Description Provides...

Cogent DataHub Vulnerabilities

Overview This Advisory is a follow-up to the Alert, “ICS-ALERT-11-256-03—COGENT DATAHUB VULNERABILITIES,” that was published September 13, 2011, on the Industrial Control Systems Cyber Emergency Response Team ICS-CERT web page. ICS-CERT is aware of a public report of multiple vulnerabilities in...

RedHat Update for cyrus-imapd RHSA-2011:0859-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Internet System Consortium releases BIND patches

The Internet System Consortium has released updates for BIND to address a vulnerability in BIND versions 9.4-ESV-R3 and later, 9.6-ESV-R2 and later, 9.6.3, 9.7.1 and later, and 9.8.0 and later. Exploitation of this vulnerability may allow an attacker to cause a denial-of-service condition...

[Bkis] sNews 1.7.1 XSS vulnerability

General Information sNews is a free content management system CMS written in PHP and MySQL. It is available at http://snewscms.com/. In April 2011, Bkis Security discovered an XSS Cross-site Scripting vulnerability in sNews CMS version 1.7.1 Taking advantage of this vulnerability, hacker might...

ZDI-11-151: HP Data Protector Backup Client Service bm Message Processing Remote Code Execution Vulnerability

ZDI-11-151: HP Data Protector Backup Client Service bm Message Processing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-151 April 29, 2011 -- CVE ID: CVE-2011-1735 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected...

Mandriva Linux Security Advisory : wireshark (MDVSA-2011:044)

This advisory updates wireshark to the latest version 1.2.15, fixing several security issues : Wireshark 1.5.0, 1.4.3, and earlier frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service memory corruption o...

Trojan Exploiting Adobe Flash Bug Has Some Odd Traits

The piece of malware that’s being used to exploit the unpatched Adobe Flash bug that was disclosed Thursday looks like sort of a run-of-the-mill Trojan, but an analysis shows that it does have some unique features. The Trojan is known by a couple of names, including Sykipot, and its infection...

RedHat Update for kdegraphics RHSA-2010:0753-01

Check for the Version of kdegraphics OpenVAS Vulnerability Test RedHat Update for kdegraphics RHSA-2010:0753-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Adobe Reader 9.3.2 - 'CoolType.dll' Remote Memory Corruption / Denial of Service

/ Title: Adobe Reader 9.3.2 CoolType.dll Remote Memory Corruption / DoS Vulnerability Summary: Adobe Reader software is the global standard for electronic document sharing. It is the only PDF file viewer that can open and interact with all PDF documents. Use Adobe Reader to view, search, digitall...

Gmail Checker Plus Chrome Extension Cross Site Scripting

Gmail Checker plus Chrome extension XSS extension: https://chrome.google.com/extensions/detail/mihcahmgecmbnbcchbopgniflfhgnkff advisore:http://lostmon.blogspot.com/2010/06/gmail-checker-plus-chrome-extension-xss.html Exploit available:yes So in this case "Google Mail Checker Plus" version 1.1.7...

Xerox Workcenter 4150 - Remote Buffer Overflow (PoC)

Xerox Workcenter 4150 - Remote Buffer Overflow PoC Application: Xerox Workcenter 4150 Remote Buffer Overflow Platforms: Xerox Workcenter 4150 Discover Date: 2009-12-21 Author: Francis Provencher Protek Research Lab's Blog: http://www.Protekresearchlab.com 1 Introduction 2 Report Timeline 3...

Solaris Update for rpc.nisd 140917-02

Check for the Version of rpc.nisd OpenVAS Vulnerability Test Solaris Update for rpc.nisd 140917-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Solaris Update for /usr/lib/dcs 111332-08

Check for the Version of /usr/lib/dcs OpenVAS Vulnerability Test Solaris Update for /usr/lib/dcs 111332-08 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for kcms_server and kcms_configure 111400-04

Check for the Version of kcmsserver and kcmsconfigure OpenVAS Vulnerability Test Solaris Update for kcmsserver and kcmsconfigure 111400-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for sshd 140119-06

Check for the Version of sshd OpenVAS Vulnerability Test Solaris Update for sshd 140119-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

Fedora 10 : kvm-74-10.fc10 (2008-11727)

---------------------------------------------------------------------- ---------- ChangeLog : - Mon Dec 22 2008 Glauber Costa - 74-10 - Fixed CVE-2008-2382. - Thu Dec 4 2008 Glauber Costa - 74-9 - Fixed bug that corrupted gnome-panel 474703 - Tue Dec 2 2008 Glauber Costa - 74-8 - Properly set fla...

CentOS Update for xpdf CESA-2008:0240 centos4 x86_64

Check for the Version of xpdf OpenVAS Vulnerability Test CentOS Update for xpdf CESA-2008:0240 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for unzip CESA-2008:0196 centos3 i386

Check for the Version of unzip OpenVAS Vulnerability Test CentOS Update for unzip CESA-2008:0196 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...