Gentoo Security Advisory GLSA 200611-25 (openldap)

The remote host is missing updates announced in advisory GLSA 200611-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200603-12 (zoo)

The remote host is missing updates announced in advisory GLSA 200603-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

php -- multiple vulnerabilities

The remote host is missing an update to the system as announced in the referenced advisory. VID 7fcf1727-be71-11db-b2ec-000c6ec775d9 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

JVN#76669770 PerlMailer cross-site scripting vulnerability

PerlMailer is a mail form CGI provided by "Homepage Decorator". It is used to send mail from a form on a web page. A cross-site scripting vulnerabiltiy exists in PerlMailer. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest...

Debian: Security Advisory (DSA-169)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JVN#50495547 Ichitaro series buffer overflow vulnerability

The "Ichitaro" series word processing software, from JustSystems Corporation, contains a buffer overflow vulnerability. If a user opens a specially crafted jtd file or views it on a web browser, an attacker could execute arbitrary code with the privileges of the user. Impact An attacker could...

[Full-disclosure] TSRT-06-12: CA BrightStor Discovery Service Mailslot Buffer Overflow Vulnerability

TSRT-06-12: CA BrightStor Discovery Service Mailslot Buffer Overflow Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-12.html October 5, 2006 -- CVE ID: CVE-2006-5142 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserver Backup R11.5 Client...

KLA10324 ACE vulnerability in Shareaza

Integer overflows were found in Shareaza. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet. Original advisories - Exploitation Related products Shareaza CVE list CVE-2006-0474 high Solution...

HP-UX PHSS_27499 : HPSBUX0208-211 Sec. Vulnerability in VVOS TGAD (rev.1)

s700800 11.04 VirtualVault 4.0 TGA daemon Update : Possible stack corruption with TGA daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS27499. The text itself is copyright C Hewlett-Packard Developmen...

Microsoft Security Bulletin MS05-007 Vulnerability in Windows Could Allow Information Disclosure (888302)

Microsoft Security Bulletin MS05-007 Vulnerability in Windows Could Allow Information Disclosure 888302 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Information Disclosure Maximum Severity Rating: Importa...

SecureCRT - Remote Command Execution

======================================================================== = SecureCRT - Remote Command Execution = = Vendor Update: = http://www.vandyke.com/download/securecrt/index.html = = Affected Software: = SecureCRT V4.1, V4.0 and probably lower = = Public disclosure on November 23, 2004...

Moderate: Red Hat Security Advisory: freeradius security update

Updated freeradius packages that fix a number of denial of service vulnerabilities as well as minor bugs are now available for Red Hat Enterprise Linux 3. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized authentication and authorization for...

Debian DSA-088-1 : fml - improper character escaping

The fml a mailing list package as distributed in Debian GNU/Linux 2.2 suffers from a cross-site scripting problem. When generating index pages for list archives the ' characters were not properly escaped for subjects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA 458-2] New python2.2 packages really fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-2 [email protected] http://www.debian.org/security/ Martin Schulze Aughst 31st, 2004 http://www.debian.org/security/faq -...

phpGroupWare Admin/Setup Password Plaintext Cookie Storage

The version of PhpGroupWare installed on the remote host is reported to be affected by a plaintext cookie authentication credentials information disclosure vulnerability. If web administration of PhpGroupWare is not conducted over an encrypted link, an attacker with the ability to sniff network...

CVSTrac cgi.c Multiple Overflows

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains multiple flaws in the mprintf, vmprintf, and vxprintf functions in cgi.c . A remote attacker, exploiting this flaw, would be able to execute arbitrary code on the remote syste...

Solaris 8 (sparc) : 111504-02

SunOS 5.8: tip patch. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid13373...

Solaris 8 (sparc) : 108968-12

SunOS 5.8: vol/vold/rmmount/devpcmem.so.1 patch. Date this patch was last updated by Sun : Dec/02/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; i...

[SECURITY] [DSA-131-2] Apache chunk handling vulnerability, update

Package : apache Problem type : remote DoS / exploit Debian-specific: no CVE name : CAN-2002-0392 CERT advisory : VU944335 The DSA-131-1 advisory for the Apache chunk handling vulnerability contained an error and was missing some essential information: The upstream fix was for the 1.3 series was...

Update to Microsoft Security Bulletin MS00-086

-----BEGIN PGP SIGNED MESSAGE----- Hi All - We have updated Microsoft Security Bulletin MS00-086 http://www.microsoft.com/technet/security/bulletin/MS00-086.asp, to provide the following additional information: There is an additional restriction on the vulnerability. As originally reported, the...