[SECURITY] [DSA 2335-1] man2html security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2335-1 [email protected] http://www.debian.org/security/ Nico Golde November 5th, 2011 http://www.debian.org/security/faq -...

Debian DSA-2335-1 : man2html - missing input sanitization

Tim Starling discovered that the Debian-native CGI wrapper for man2html, a program to convert UNIX man pages to HTML, is not properly escaping user-supplied input when displaying various error messages. A remote attacker can exploit this flaw to conduct cross-site scripting XSS attacks...

[SECURITY] [DSA 2335-1] man2html security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2335-1 [email protected] http://www.debian.org/security/ Nico Golde November 5th, 2011 http://www.debian.org/security/faq -...

DSA-2335-1 man2html - missing input sanitization

Bulletin has no description...

RHEL 6 : php53 and php (RHSA-2011:1423)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1423 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A signedness issue was found in the way the PHP crypt...

RedHat Update for php53 and php RHSA-2011:1423-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for php53 and php RHSA-2011:1423-01

Check for the Version of php53 and php OpenVAS Vulnerability Test RedHat Update for php53 and php RHSA-2011:1423-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

php: DoS when using HTTP proxy with the FTP wrapper

Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper...

Moderate: Red Hat Security Advisory: php53 and php security update

Updated php53 and php packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

kdelibs: input validation failure in KSSL

The KDE SSL Wrapper KSSL API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name CN of a certificate via rich text...

PT-2011-1143 · Kde +1 · Kdelibs +2

Name of the Vulnerable Software and Affected Versions: kdelibs versions 3.3.1 through 3.5.4 kdelibs versions prior to 4.12.5-r1 KDE SC versions 4.6.0 through 4.7.1 Description: The issue allows remote attackers to exploit vulnerabilities in the kdelibs package, potentially leading to a breach of...

Google Chrome v8 script object wrapper vulnerability

Google Chrome is an open source WEB browser. A security vulnerability exists in the v8 script object wrapper in Google Chrome, which can be exploited by remote attackers to cause a denial of service and other remote attacks...

Important: Red Hat Security Advisory: jakarta-commons-daemon-jsvc security update

An updated jakarta-commons-daemon-jsvc package that fixes one security issue is now available for JBoss Enterprise Web Server 1.0 for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVS...

PDD - Packet Dump Decode Released

PDD - Packet Dump Decode Released PDD is an open-source program created by Srivats.Packet Dump Decode pdd is a simple convenient GUI wrapper around the Wireshark/Ethereal tools to convert packet hexdumps into well formatted xml containing the decoded protocols and protocol contents.You need to...

VMware Tools Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VSR Security Advisory http://www.vsecurity.com/ - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: VMware Tools Multiple Vulnerabilities Release Date: 2011-06-03 Application: VMware Guest Tools Severity:...

VMWare Tools privilege escalations

Privilege escalation via mount.vmhgfs and vmware-user-suid-wrapper suid utilities...

Nmap NSE net: afp-showmount

Shows AFP shares and ACLs. SYNTAX: afp.password: The password to use for authentication. If unset, first attempt to use credentials found by 'afp-brute', then no credentials. afp.username: The username to use for authentication. If unset, first attempt to use credentials found by 'afp-brute', the...

Nmap NSE net: snmp-netstat

Attempts to query SNMP for a netstat like output. SYNTAX: snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id: gbnmapsnmpnetstatnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper...

Nmap NSE net: informix-tables

Retrieves a list of tables and column definitions for each database on an Informix server. SYNTAX: informix.instance: specifies the Informix instance to connect to informix-query.username: The username used for authentication informix-query.password: The password used for authentication Version 0...

Nmap NSE net: smtp-commands

Attempts to use EHLO and HELP to gather the Extended commands supported by an SMTP server. SYNTAX: smtp-commands.domain: Define the domain to be used in the SMTP commands. OpenVAS Vulnerability Test $Id: gbnmapsmtpcommandsnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper...