CVE-2010-0412: Undefined Security Weakness

stap-server in SystemTap 1.1 does not properly restrict the value of the -B aka BUILD option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273...

Debian DSA-1888-1 : openssl, openssl097 - cryptographic weakness

Certificates with MD2 hash signatures are no longer accepted by OpenSSL, since they're no longer considered cryptographically secure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1888...

Debian DSA-1946-1 : belpic - cryptographic weakness

It was discovered that belpic, the belgian eID PKCS11 library, does not properly check the result of an OpenSSL function for verifying cryptographic signatures, which could be used to bypass the certificate validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Top 25 Dangerous Programming Errors Updated

The 2010 CWE/SANS Top 25 Most Dangerous Programming Errors is a list of widespread and critical programming errors that can lead to serious software vulnerabilities. Read the full article. Common Weakness Enumeration/Mitre...

Chrome Password Manager Cross Origin Weakness (CVE-2010-0556)

Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Chrome Password Manager Cross Origin Weakness Release Date: 2010-02-15 Application: Google Chrome Web Browser Versions:...

CVE-2010-0634: Undefined Security Weakness

Unspecified vulnerability in Fast Lexical Analyzer Generator flex before 2.5.35 has unknown impact and attack vectors...

CVE-2010-0612: Undefined Security Weakness

Unspecified vulnerability in DocumentManager before 4.0 has unknown impact and attack vectors, related to file rights...

Microsoft Windows SMB server multiple security vulnerabilities

Memory corruptions, buffer overflow, DoS conditions, cryptography weakness...

CVE-2010-0558: Undefined Security Weakness

The default configuration of Oracle OpenSolaris snv77 through snv131 allows attackers to have an unspecified impact via vectors related to using smbadm to join a Windows Active Directory domain...

Apple iPhone cryptographic weakness

Certificate key usage is not checked during validation of .mobileconfig wireless autoconfiguration file...

[SECURITY] [DSA 1985-1] New sendmail packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1985-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 31, 2010 http://www.debian.org/security/faq -...

iPad Encryption Weakness Likened to iPhone

Apple’s new iPad device looks like it will have some of the same security issues that affect the iPhone, such as weak encryption, a mobile security expert said. Read the full article. Cnet...

FWD: LedgerSMB Security Advisory: Multiple Vulnerabilities

Hi all; It has been brought to our attention that a number of security vulnerabilities have been noted in SQL-Ledger. Several of these affect earlier versions of LedgerSMB, and three hotfixes have been released for problems that continue to affect the LedgerSMB codebase. As always, we highly...

Zend Framework 1.9.6 - Multiple Input Validation Vulnerabilities Security Bypass

Zend Framework 1.9.6 - Multiple Input Validation Vulnerabilities Security Bypass source: https://www.securityfocus.com/bid/37809/info Zend Framework is prone to multiple input-validation vulnerabilities and a weakness: - Multiple cross-site scripting issues - An HTML-injection issue - A...

Solaris 7 8 9 sadmind RPC Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

CVE-2010-0276: Undefined Security Weakness

IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU...

CVE-2009-4519: Undefined Security Weakness

Multiple unspecified vulnerabilities in Ortro before 1.3.4 have unknown impact and attack vectors...

CVE-2009-4330: Undefined Security Weakness

Unspecified vulnerability in db2licm in the Engine Utilities component in IBM DB2 9.5 before FP5 has unknown impact and local attack vectors...

IBM Director CIM Server Consumer Name Handling Denial of Service (CVE-2009-0879)

IBM Director is an element management system, previously known as Netfinity Director that was designed by IBM based on Tivoli IT Director. It consists of three components: agent, administering console, and server. The agent software is installed on systems to be monitored and other components...

[SECURITY] [DSA 1946-1] New belpic packages fix cryptographic weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1946-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 04, 2009 http://www.debian.org/security/faq -...