< Back to JetLib.com

jetlib.sec » Packet Storm Security Advisories

« Expand/Collapse

Packet Storm Security Advisories

Skip to page: 1 2 3 ... 36

February 21, 2012
18:10
Red Hat Security Advisory 2012-0323-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0323-01 - The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request. The httpd server included the full HTTP header line in the default error page generated when receiving an excessively long or malformed header. Malicious JavaScript running in the server's domain context could use this flaw to gain access to httpOnly cookies.
Tags: server http red apache-http-server red-hat-security reverse-proxy
18:10
Red Hat Security Advisory 2012-0322-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0322-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Tags: java hat red java-runtime-environment red-hat-security java-virtual-machine
18:10
Red Hat Security Advisory 2012-0321-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0321-01 - Concurrent Version System is a version control system that can record the history of your files. A heap-based buffer overflow flaw was found in the way the CVS client handled responses from HTTP proxies. A malicious HTTP proxy could use this flaw to cause the CVS client to crash or, possibly, execute arbitrary code with the privileges of the user running the CVS client. All users of cvs are advised to upgrade to these updated packages, which contain a patch to correct this issue.
Tags: cvs client red concurrent-version-system based-buffer-overflow cvs-client
18:10
Gentoo Linux Security Advisory 201202-02
» ‎ Packet Storm Security Advisories

Gentoo Linux Security Advisory 201202-2 - Multiple vulnerabilities were found in Quagga, the worst of which leading to remote execution of arbitrary code. Versions less than 0.99.20 are affected.
Tags: gentoo security linux gentoo-linux-security code-versions security-advisory
7:41
Red Hat Security Advisory 2012-0309-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0309-03 - The sudo utility allows system administrators to give certain users the ability to run commands as root. A flaw was found in the sudo password checking logic. In configurations where the sudoers settings allowed a user to run a command using sudo with only the group ID changed, sudo failed to prompt for the user's password before running the specified command with the elevated group privileges. Various other issues have also been addressed in this advisory.
Tags: advisory sudo red red-hat-security sudoers security-advisory
7:40
Red Hat Security Advisory 2012-0310-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0310-03 - The nfs-utils package provides a daemon for the kernel Network File System server, and related tools such as the mount.nfs, umount.nfs, and showmount programs. It was found that the mount.nfs tool did not handle certain errors correctly when updating the mtab file. A local attacker could use this flaw to corrupt the mtab file.
Tags: hat file red kernel-network red-hat-security mount-nfs
7:39
Red Hat Security Advisory 2012-0153-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0153-03 - Sos is a set of tools that gather information about system hardware and configuration. The sosreport utility incorrectly included Certificate-based Red Hat Network private entitlement keys in the resulting archive of debugging information. An attacker able to access the archive could use the keys to access Red Hat Network content available to the host. This issue did not affect users of Red Hat Network Classic. This updated sos package also includes numerous bug fixes and enhancements.
Tags: hat network red red-hat-network red-hat-security network-content
7:37
Red Hat Security Advisory 2012-0311-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0311-03 - The ibutils packages provide InfiniBand network and path diagnostics. It was found that the ibmssh executable had an insecure relative RPATH set in the ELF header. A local user able to convince another user to run ibmssh in an attacker-controlled directory could run arbitrary code with the privileges of the victim. Under certain circumstances, the "ibdiagnet -r" command could suffer from memory corruption and terminate with a "double free or corruption" message and a backtrace. With this update, the correct memory management function is used to prevent the corruption.
Tags: hat corruption red memory-corruption red-hat-security correct-memory
7:36
Red Hat Security Advisory 2012-0313-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0313-03 - Samba is an open-source implementation of the Server Message Block or Common Internet File System protocol, which allows PC-compatible machines to share files, printers, and other information. The default Samba server configuration enabled both the "wide links" and "unix extensions" options, allowing Samba clients with write access to a share to create symbolic links that point to any location on the file system. Clients connecting with CIFS UNIX extensions disabled could have such links resolved on the server, allowing them to access and possibly overwrite files outside of the share. With this update, "wide links" is set to "no" by default. In addition, the update ensures "wide links" is disabled for shares that have "unix extensions" enabled.
Tags: server unix samba server-message-block open-source-implementation samba-clients
7:35
Red Hat Security Advisory 2012-0312-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0312-03 - The initscripts package contains system scripts to boot your system, change runlevels, activate and deactivate most network interfaces, and shut the system down cleanly. With the default IPsec ifup script configuration, the racoon IKE key management daemon used aggressive IKE mode instead of main IKE mode. This resulted in the preshared key hash being sent unencrypted, which could make it easier for an attacker able to sniff network traffic to obtain the plain text PSK from a transmitted hash.
Tags: hat red system ike red-hat-security system-scripts network-interfaces
7:35
Debian Security Advisory 2413-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 2413-1 - Two buffer overflows have been discovered in libarchive, a library providing a flexible interface for reading and writing archives in various formats. The possible buffer overflows while reading is9660 or tar streams allow remote attackers to execute arbitrary code depending on the application that makes use of this functionality.
Tags: advisory debian security buffer-overflows flexible-interface linux-security
7:34
Red Hat Security Advisory 2012-0168-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0168-01 - The rhev-hypervisor5 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. A heap overflow flaw was found in the way QEMU-KVM emulated the e1000 network interface card. A privileged guest user in a virtual machine whose network interface is configured to use the e1000 emulated driver could use this flaw to crash the host or, possibly, escalate their privileges on the host.
Tags: hat red security network-interface-card red-hat-security privileged-guest
7:33
Red Hat Security Advisory 2012-0301-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0301-03 - ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. It was found that ImageMagick utilities tried to load ImageMagick configuration files from the current working directory. If a user ran an ImageMagick utility in an attacker-controlled directory containing a specially-crafted ImageMagick configuration file, it could cause the utility to execute arbitrary code.
Tags: imagemagick hat red x-window imagemagick-utilities x-window-system red-hat-security
7:32
Red Hat Security Advisory 2012-0304-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0304-03 - The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified programs at scheduled times. The vixie-cron package adds improved security and more powerful configuration options to the standard version of cron. A race condition was found in the way the crontab program performed file time stamp updates on a temporary file created when editing a user crontab file. A local attacker could use this flaw to change the modification time of arbitrary system files via a symbolic link attack.
Tags: red cron security vixie-cron unix-daemon red-hat-security
7:32
Red Hat Security Advisory 2012-0305-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0305-03 - The boost packages provide free, peer-reviewed, portable C++ source libraries with emphasis on libraries which work well with the C++ Standard Library. Invalid pointer dereference flaws were found in the way the Boost regular expression library processed certain, invalid expressions. An attacker able to make an application using the Boost library process a specially-crafted regular expression could cause that application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.
Tags: library red application regular-expression-library c-standard-library invalid-pointer
7:31
Red Hat Security Advisory 2012-0151-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0151-03 - The conga packages provide a web-based administration tool for remote cluster and storage management. Multiple cross-site scripting flaws were found in luci, the conga web-based administration application. If a remote attacker could trick a user, who was logged into the luci interface, into visiting a specially-crafted URL, it would lead to arbitrary web script execution in the context of the user's luci session. These updated conga packages include several bug fixes and an enhancement.
Tags: luci conga red red-hat-security arbitrary-web administration-application
7:30
Red Hat Security Advisory 2012-0302-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0302-03 - The Common UNIX Printing System provides a portable printing layer for Linux, UNIX, and similar operating systems. A heap-based buffer overflow flaw was found in the Lempel-Ziv-Welch decompression algorithm implementation used by the CUPS GIF image format reader. An attacker could create a malicious GIF image file that, when printed, could possibly cause CUPS to crash or, potentially, execute arbitrary code with the privileges of the "lp" user.
Tags: hat red security ziv-welch decompression-algorithm common-unix-printing lempel-ziv
7:30
Red Hat Security Advisory 2012-0303-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0303-03 - X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use this flaw to determine the existence of a file in a directory not accessible to the user, via a symbolic link attack.
Tags: user hat red x.org x-window open-source-implementation graphical-user-interfaces x-window-system
7:29
Red Hat Security Advisory 2012-0149-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0149-03 - KVM is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. It was found that the kvm_vm_ioctl_assign_device() function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A member of the kvm group on the host could assign unused PCI devices, or even devices that were in use and whose resources were not properly claimed by the respective drivers, which could result in the host crashing.
Tags: kvm red linux red-hat-security linux-kernel intel-64
7:29
Red Hat Security Advisory 2012-0306-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0306-03 - Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third-party, the Key Distribution Center. It was found that ftpd, a Kerberos-aware FTP server, did not properly drop privileges. On Red Hat Enterprise Linux 5, the ftpd daemon did not check for the potential failure of the effective group ID change system call. If the group ID change failed, a remote FTP user could use this flaw to gain unauthorized read or write access to files that are owned by the root group.
Tags: group hat red network-authentication-system red-hat-security symmetric-encryption
7:28
Red Hat Security Advisory 2012-0150-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0150-03 - The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: A flaw was found in the way the Linux kernel's Event Poll subsystem handled large, nested epoll structures. A local, unprivileged user could use this flaw to cause a denial of service.
Tags: kernel security linux kernel-packages red-hat-security linux-kernel
7:28
Red Hat Security Advisory 2012-0307-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0307-03 - The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, util-linux contains the fdisk configuration tool and the login program. Multiple flaws were found in the way the mount and umount commands performed mtab file updates. A local, unprivileged user allowed to mount or unmount file systems could use these flaws to corrupt the mtab file and create a stale lock file, preventing other users from mounting and unmounting file systems.
Tags: hat file red red-hat-security linux-package login-program
7:28
Red Hat Security Advisory 2012-0308-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0308-03 - BusyBox provides a single binary that includes versions of a large number of system commands, including a shell. This can be very useful for recovering from certain types of system failures, particularly those involving broken shared libraries. A buffer underflow flaw was found in the way the uncompress utility of BusyBox expanded certain archive files compressed using Lempel-Ziv compression. If a user were tricked into expanding a specially-crafted archive file with uncompress, it could cause BusyBox to crash or, potentially, execute arbitrary code with the privileges of the user running BusyBox.
Tags: hat red busybox ziv red-hat-security system-failures
7:21
Red Hat Security Advisory 2012-0152-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0152-03 - The kexec-tools package contains the /sbin/kexec binary and utilities that together form the user-space component of the kernel's kexec feature. The /sbin/kexec binary facilitates a new kernel to boot using the kernel's kexec feature either on a normal or a panic reboot. The kexec fastboot mechanism allows booting a Linux kernel from the context of an already running kernel. Kdump used the SSH "StrictHostKeyChecking=no" option when dumping to SSH targets, causing the target kdump server's SSH host key not to be checked. This could make it easier for a man-in-the-middle attacker on the local network to impersonate the kdump SSH target server and possibly gain access to sensitive information in the vmcore dumps.
Tags: kernel kexec ssh target-server red-hat-security linux-kernel
February 20, 2012
22:52
Secunia Security Advisory 48084
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Hitachi Command Suite products, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security security-advisory hitachi
18:43
Red Hat Security Advisory 2012-0317-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0317-01 - The libpng packages contain a library of functions for creating and manipulating PNG image format files. A heap-based buffer overflow flaw was found in libpng. An attacker could create a specially-crafted PNG image that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the user running the application. Users of libpng and libpng10 should upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications using libpng or libpng10 must be restarted for the update to take effect.
Tags: hat libpng red png-image-format based-buffer-overflow red-hat-security
18:43
Ubuntu Security Notice USN-1370-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1370-1 - It was discovered that libvorbis did not correctly handle certain malformed ogg files. If a user were tricked into opening a specially crafted ogg file with an application that uses libvorbis, an attacker could cause a denial of service or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code
18:42
Debian Security Advisory 2412-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 2412-1 - It was discovered that a heap overflow in the Vorbis audio compression library could lead to the execution of arbitrary code if a malformed Ogg Vorbis file is processed.
Tags: advisory debian security ogg-vorbis linux-security debian-linux
18:42
Debian Security Advisory 2411-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 2411-1 - It was discovered that mumble, a VoIP client, does not probably manage permission on its user-specific configuration files, allowing other local users on the system to access them.
Tags: advisory debian security linux-security debian-linux debian-security
18:42
Gentoo Linux Security Advisory 201202-01
» ‎ Packet Storm Security Advisories

Gentoo Linux Security Advisory 201202-1 - Multiple vulnerabilities have been reported in Chromium, some of which may allow execution of arbitrary code. Versions less than 17.0.963.56 are affected.
Tags: gentoo security linux gentoo-linux-security code-versions security-advisory
18:42
Debian Security Advisory 2412-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 2412-1 - It was discovered that a heap overflow in the Vorbis audio compression library could lead to the execution of arbitrary code if a malformed Ogg Vorbis file is processed.
Tags: advisory debian security ogg-vorbis linux-security debian-linux
12:11
ELBA 5.4.1 SQL Injection / Denial Of Service
» ‎ Packet Storm Security Advisories

ELBA version 5.4.1 suffers from denial of service, information disclosure, and remote SQL injection vulnerabilities.
Tags: injection denial sql elba denial-of-service information-disclosure
0:25
Secunia Security Advisory 48003
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for qemu. This fixes a vulnerability, which can be exploited by malicious, local users in a guest virtual machine to potentially gain escalated privileges.
Tags: advisory secunia security suse security-advisory virtual-machine
0:08
Secunia Security Advisory 48109
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Sony has discovered a vulnerability in MoniWiki, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security security-advisory vulnerability
February 19, 2012
23:40
Secunia Security Advisory 48068
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for xulrunner. This fixes a vulnerability, which can be exploited by malicious people to potentially compromise a user's system.
Tags: advisory secunia security s-system security-advisory
23:36
Secunia Security Advisory 48108
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in X3 CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security security-advisory vulnerability
22:42
Secunia Security Advisory 48047
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Context Information Security has reported a vulnerability in SAP NetWeaver, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security sap-netweaver security-advisory
22:42
Secunia Security Advisory 48093
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in AQUIS and TERMIS, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security aquis s-system
22:42
Secunia Security Advisory 48102
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Sony has discovered a vulnerability in Tiki Wiki CMS/Groupware, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security tiki-wiki security-advisory
22:42
Secunia Security Advisory 48043
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Debian has issued an update for libvorbis. This fixes a vulnerability, which can be exploited by malicious people to compromise an application using the library.
Tags: advisory secunia security security-advisory vulnerability
22:41
Secunia Security Advisory 48059
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Gentoo has issued an update for chromium. This fixes multiple vulnerabilities, where some have an unknown impact and others can be exploited by malicious people to bypass certain security restrictions, manipulate certain data, and compromise a user's system.
Tags: s-system security-restrictions secunia
22:41
Secunia Security Advisory 48098
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for firefox. This fixes a vulnerability, which can be exploited by malicious people to potentially compromise a user's system.
Tags: advisory secunia security s-system security-advisory
22:41
Secunia Security Advisory 48044
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Debian has issued an update for mumble. This fixes a security issue, which can be exploited by malicious, local users to disclose sensitive information.
Tags: advisory secunia security security-advisory security-issue
22:41
Secunia Security Advisory 48081
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for thunderbird. This fixes a vulnerability, which can be exploited by malicious people to potentially compromise a user's system.
Tags: advisory secunia security s-system security-advisory
22:41
Secunia Security Advisory 48075
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for thunderbird. This fixes multiple vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, disclose certain sensitive information, and compromise a user's system.
Tags: advisory secunia security s-system security-restrictions
22:41
Secunia Security Advisory 48057
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in Mitra National Iranian CMS, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security security-advisory iranian
22:41
Secunia Security Advisory 48111
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for apache2. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions and by malicious people to disclose potentially sensitive information and cause a DoS (Denial of Service).
Tags: advisory secunia security suse denial-of-service security-restrictions
22:41
Secunia Security Advisory 48040
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - schaffnern has discovered a vulnerability in the Absolute Privacy plugin for WordPress, which can be exploited by malicious people to bypass certain security restrictions.
Tags: advisory secunia security absolute-privacy security-restrictions
22:41
Secunia Security Advisory 47971
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in F*EX (Frams's Fast File EXchange), which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security frams file-exchange
22:41
Secunia Security Advisory 48053
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in SyndeoCMS, which can be exploited by malicious people to conduct cross-site request forgery attacks.
Tags: advisory secunia security security-advisory forgery
February 17, 2012
23:59
Secunia Security Advisory 48078
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for libpng. This fixes a vulnerability, which can be exploited by malicious people to potentially compromise an application using the library.
Tags: advisory secunia security security-advisory ubuntu
23:59
Secunia Security Advisory 48085
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for jetty5. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security suse denial-of-service security-advisory
23:59
Secunia Security Advisory 47922
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Dell SecureWorks has reported a vulnerability in Cisco IronPort Encryption Appliance, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security dell-secureworks cisco-ironport secureworks security-advisory
23:59
Secunia Security Advisory 48073
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for java-1.6.0-sun. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.
Tags: advisory secunia security denial-of-service security-advisory
23:59
Secunia Security Advisory 48042
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for texlive. This fixes multiple vulnerabilities, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
23:59
Secunia Security Advisory 48001
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in TeX Live, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
23:59
Secunia Security Advisory 48086
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Roger Wemyss has reported a vulnerability in SecureSphere Web Application Firewall, which can be exploited by malicious people to conduct script insertion attacks.
Tags: advisory secunia security roger-wemyss application-firewall wemyss
23:59
Secunia Security Advisory 48002
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Two vulnerabilities have been reported in TeX Live, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
23:58
Secunia Security Advisory 48080
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for apache2. This fixes two weaknesses and some vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions and gain escalated privileges and by malicious people to bypass certain security restrictions, disclose potentially sensitive information, and cause a DoS (Denial of Service).
Tags: advisory secunia security denial-of-service security-restrictions
19:29
SAP AG Netweaver 7.02 Buffer Overflow
» ‎ Packet Storm Security Advisories

SAP AG Netweaver version 7.02 suffers from a stack based buffer overflow vulnerability in the SAPHostControl service. Exploitation can lead to code execution.
Tags: buffer netweaver sap buffer-overflow-vulnerability based-buffer-overflow
19:25
Mandriva Linux Security Advisory 2012-021
» ‎ Packet Storm Security Advisories

Mandriva Linux Security Advisory 2012-021 - Multiple security issues were identified and fixed in OpenJDK (icedtea6). The updated packages provides icedtea6-1.10.6 which is not vulnerable to these issues.
Tags: mandriva security linux mandriva-linux linux-security security-advisory
19:21
PHP 5.2.17 Information Disclosure / Code Execution
» ‎ Packet Storm Security Advisories

PHP versions 5.2.0 through 5.2.17 suffers from an information disclosure and possible code execution vulnerability due to the filter_globals struct not being clean up during the shutdown stage.
Tags: disclosure php information code-execution information-disclosure globals
19:14
HP Security Bulletin HPSBPI02728 SSRT100692 4
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBPI02728 SSRT100692 4 - A potential security vulnerability has been identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware. Revision 4 of this advisory.
Tags: hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders
19:06
Red Hat Security Advisory 2012-0144-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0144-01 - The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities are detailed on the Adobe security page APSB12-03, listed in the References section. Multiple security flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially-crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the specially-crafted SWF content.
Tags: swf adobe security red-hat-security web-browser-plug adobe-flash-player
19:06
Ubuntu Security Notice USN-1367-4
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1367-4 - USN-1367-1 fixed vulnerabilities in libpng. This provides the corresponding update for Xulrunner. Jueri Aedla discovered that libpng did not properly verify the size used when allocating memory during chunk decompression. If a user or automated system using libpng were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: ubuntu libpng security denial-of-service automated-system
19:05
Ubuntu Security Notice USN-1369-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1369-1 - Nicolas Gregoire and Aki Helin discovered that when processing a malformed embedded XSLT stylesheet, Thunderbird can crash due to memory corruption. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. It was discovered that memory corruption could occur during the decoding of Ogg Vorbis files. If the user were tricked into opening a specially crafted file, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird nicolas-gregoire memory-corruption xslt-stylesheet
19:05
Ubuntu Security Notice USN-1367-3
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1367-3 - USN-1367-1 fixed vulnerabilities in libpng. This provides the corresponding update for Thunderbird. Jueri Aedla discovered that libpng did not properly verify the size used when allocating memory during chunk decompression. If a user or automated system using libpng were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: ubuntu libpng security denial-of-service automated-system
19:05
Ubuntu Security Notice USN-1367-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1367-2 - USN-1367-1 fixed vulnerabilities in libpng. This provides the corresponding update for Firefox. Jueri Aedla discovered that libpng did not properly verify the size used when allocating memory during chunk decompression. If a user or automated system using libpng were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: ubuntu libpng security denial-of-service automated-system
February 16, 2012
23:21
Secunia Security Advisory 48072
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for thunderbird. This fixes a vulnerability, which can be exploited by malicious people to potentially compromise a user's system.
Tags: advisory secunia security s-system security-advisory
23:21
Secunia Security Advisory 47998
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A weakness has been reported in WebSphere DataPower SOA Appliances, which can be exploited by malicious people to disclose potentially sensitive information and hijack a user's session.
Tags: advisory secunia security datapower security-advisory
22:43
Secunia Security Advisory 48020
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A weakness has been reported in the Organic Groups Vocabulary module for Drupal, which can be exploited by malicious users to bypass certain security restrictions.
Tags: advisory secunia security malicious-users security-restrictions
22:43
Secunia Security Advisory 48056
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Sony has discovered a vulnerability in Jenkins, which can be exploited by malicious users to conduct script insertion attacks.
Tags: advisory secunia security malicious-users security-advisory
22:43
Secunia Security Advisory 48025
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for openssl. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security suse denial-of-service security-advisory
22:43
Secunia Security Advisory 48074
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Hitachi has acknowledged multiple vulnerabilities in Hitachi Cosminexus products, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.
Tags: advisory secunia security denial-of-service security-advisory
22:43
Secunia Security Advisory 48070
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for firefox and seamonkey. This fixes a vulnerability, which can be exploited by malicious people to potentially compromise a user's system.
Tags: advisory secunia security s-system security-advisory
22:43
Secunia Security Advisory 48069
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for xulrunner. This fixes a vulnerability, which can be exploited by malicious people to potentially compromise a user's system.
Tags: advisory secunia security s-system security-advisory
22:43
Secunia Security Advisory 47835
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Two vulnerabilities have been reported in swDesk, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security security-advisory vulnerabilities
22:43
Secunia Security Advisory 48089
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Mozilla has acknowledged a vulnerability in Firefox, Thunderbird, and Seamonkey, which can be exploited by malicious people to potentially compromise a user's system.
Tags: advisory secunia security s-system seamonkey
22:43
Secunia Security Advisory 48006
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for flash-player. This fixes multiple vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user's system.
Tags: advisory secunia security suse s-system security-restrictions
22:43
Secunia Security Advisory 48012
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for flash-plugin. This fixes multiple vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user's system.
Tags: advisory secunia security s-system security-restrictions
22:43
Secunia Security Advisory 48013
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Gjoko Krstic has discovered multiple vulnerabilities in SQL Buddy, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security krstic security-advisory
22:42
Secunia Security Advisory 47950
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in swDesk, which can be exploited by malicious users to compromise a vulnerable system.
Tags: advisory secunia security malicious-users security-advisory
22:42
Secunia Security Advisory 48010
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Piwik, which can be exploited by malicious people to conduct cross-site scripting and forgery attacks.
Tags: advisory secunia security cross-site-scripting security-advisory
22:42
Secunia Security Advisory 48016
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Google Chrome, where some have an unknown impact and others can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
19:25
Skype 5.6.59.x Memory Corruption
» ‎ Packet Storm Security Advisories

Skype version 5.6.59.x suffers from a memory corruption vulnerability.
Tags: corruption Skype memory memory-corruption vulnerability
18:37
java.util.zip Denial Of Service
» ‎ Packet Storm Security Advisories

PRE-CERT Security Advisory - The function countCENHeaders() in zip_util.c of the java.util.zip implementation contains an off-by-one bug. The bug can be exploited via corrupted ZIP files to cause an endless recursion. The endless recursion results in a segmentation fault of the JVM. Oracle Java SE and IcedTea6 have multiple affected versions.
Tags: util java zip oracle-java segmentation-fault denial-of-service
18:35
Ubuntu Security Notice USN-1367-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1367-1 - It was discovered that libpng did not properly verify the embedded profile length of iCCP chunks. An attacker could exploit this to cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS. Jueri Aedla discovered that libpng did not properly verify the size used when allocating memory during chunk decompression. If a user or automated system using libpng were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: ubuntu libpng security application-crash denial-of-service automated-system
18:34
Red Hat Security Advisory 2012-0143-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0143-01 - XULRunner provides the XUL Runtime environment for applications using the Gecko layout engine. A heap-based buffer overflow flaw was found in the way XULRunner handled PNG images. A web page containing a malicious PNG image could cause an application linked against XULRunner to crash or, potentially, execute arbitrary code with the privileges of the user running the application. All XULRunner users should upgrade to these updated packages, which correct this issue. After installing the update, applications using XULRunner must be restarted for the changes to take effect.
Tags: xulrunner hat red based-buffer-overflow png-images red-hat-security
18:34
Ubuntu Security Notice USN-1368-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1368-1 - It was discovered that the Apache HTTP Server incorrectly handled the SetEnvIf .htaccess file directive. An attacker having write access to a .htaccess file may exploit this to possibly execute arbitrary code. Prutha Parikh discovered that the mod_proxy module did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external exposure. Various other issues were also addressed.
Tags: ubuntu proxy security apache-http-server external-exposure proxy-module
18:34
Red Hat Security Advisory 2012-0142-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0142-01 - Mozilla Firefox is an open source web browser. A heap-based buffer overflow flaw was found in the way Firefox handled PNG images. A web page containing a malicious PNG image could cause Firefox to crash or, possibly, execute arbitrary code with the privileges of the user running Firefox. All Firefox users should upgrade to this updated package, which corrects this issue. After installing the update, Firefox must be restarted for the changes to take effect.
Tags: hat red firefox open-source-web based-buffer-overflow png-images
18:34
Red Hat Security Advisory 2012-0141-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0141-01 - SeaMonkey is an open source web browser, e-mail and newsgroup client, IRC chat client, and HTML editor. A heap-based buffer overflow flaw was found in the way SeaMonkey handled PNG images. A web page containing a malicious PNG image could cause SeaMonkey to crash or, possibly, execute arbitrary code with the privileges of the user running SeaMonkey. All SeaMonkey users should upgrade to these updated packages, which correct this issue. After installing the update, SeaMonkey must be restarted for the changes to take effect.
Tags: seamonkey hat red open-source-web based-buffer-overflow png-images
18:33
Red Hat Security Advisory 2012-0139-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0139-01 - The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch page, listed in the References section. All users of java-1.6.0-sun are advised to upgrade to these updated packages, which provide JDK and JRE 6 Update 31 and resolve these issues. All running instances of Sun Java must be restarted for the update to take effect.
Tags: sun red update red-hat-security oracle-java software-development-kit
18:33
Red Hat Security Advisory 2012-0140-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0140-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. A heap-based buffer overflow flaw was found in the way Thunderbird handled PNG images. An HTML mail message or remote content containing a specially-crafted PNG image could cause Thunderbird to crash or, possibly, execute arbitrary code with the privileges of the user running Thunderbird. All Thunderbird users should upgrade to this updated package, which corrects this issue. After installing the update, Thunderbird must be restarted for the changes to take effect.
Tags: hat red thunderbird html-mail-message based-buffer-overflow mozilla-thunderbird
18:31
Ubuntu Security Notice USN-1284-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1284-2 - USN-1284-1 fixed vulnerabilities in Update Manager. One of the fixes introduced a regression for Kubuntu users attempting to upgrade to a newer Ubuntu release. This update fixes the problem. David Black discovered that Update Manager incorrectly extracted the downloaded upgrade tarball before verifying its GPG signature. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to replace arbitrary files. David Black discovered that Update Manager created a temporary directory in an insecure fashion. A local attacker could possibly use this flaw to read the XAUTHORITY file of the user performing the upgrade. This update also adds a hotfix to Update Notifier to handle cases where the upgrade is being performed from CD media. Various other issues were also addressed.
Tags: ubuntu update upgrade david-black manager.-one gpg-signature man-in-the-middle-attack cd-media
February 15, 2012
23:06
Secunia Security Advisory 48033
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Adobe Flash Player, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a user's system.
Tags: advisory secunia security adobe-flash-player s-system security-restrictions
23:06
Secunia Security Advisory 47997
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - High-Tech Bridge SA has discovered multiple vulnerabilities in 11in1, which can be exploited by malicious people to conduct cross-site request forgery attacks and disclose sensitive information.
Tags: advisory secunia security security-advisory forgery
22:31
Secunia Security Advisory 47981
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - High-Tech Bridge SA has discovered multiple vulnerabilities in LEPTON CMS, which can be exploited by malicious users to disclose sensitive information and conduct script insertion attacks and by malicious people to conduct cross-site scripting and SQL injection attacks.
Tags: advisory secunia security sql-injection cross-site-scripting malicious-users
22:31
Secunia Security Advisory 48035
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in 389 Directory Server, which can be exploited by malicious users to cause a DoS (Denial of Service).
Tags: advisory secunia security denial-of-service malicious-users
22:31
Secunia Security Advisory 48022
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A security issue has been reported in the Link checker module for Drupal, which can be exploited by malicious users to bypass certain security restrictions.
Tags: advisory secunia security link-checker malicious-users security-restrictions
22:31
Secunia Security Advisory 48032
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in the CDN module for Drupal, which can be exploited by malicious people to disclose sensitive information.
Tags: advisory secunia security security-advisory drupal
22:31
Secunia Security Advisory 47923
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Debian has released an update for libpng. This fixes a vulnerability, which can be exploited by malicious people to potentially compromise an application using the library.
Tags: advisory secunia security security-advisory vulnerability
22:31
Secunia Security Advisory 47450
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Tielei Wang has discovered a vulnerability in ACDSee, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
22:31
Secunia Security Advisory 47959
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Cisco NX-OS, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security cisco-nx-os denial-of-service security-advisory
22:31
Secunia Security Advisory 48019
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in the Faster Permissions module for Drupal, which can be exploited by malicious people to bypass certain security restrictions.
Tags: advisory secunia security security-restrictions security-advisory
22:31
Secunia Security Advisory 47917
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Cisco NX-OS, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security cisco-nx-os denial-of-service security-advisory
22:31
Secunia Security Advisory 48026
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in libpng, which can be exploited by malicious people to potentially compromise an application using the library.
Tags: advisory secunia security libpng security-advisory
22:31
Secunia Security Advisory 48007
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Some vulnerabilities with an unknown impact have been reported in Citrix XenServer.
Tags: advisory secunia security security-advisory vulnerabilities
22:31
Secunia Security Advisory 47955
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Debian has issued an update for devscripts. This fixes some weaknesses, which potentially can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security security-advisory
22:31
Secunia Security Advisory 48039
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for devscripts. This fixes some weaknesses, which potentially can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security security-advisory ubuntu
19:35
Cisco Security Advisory 20120215-nxos
» ‎ Packet Storm Security Advisories

Cisco Security Advisory - Cisco NX-OS Software is affected by a denial of service (DoS) vulnerability that could cause Cisco Nexus 1000v, 5000, and 7000 Series Switches that are running affected versions of Cisco NX-OS Software to reload when the IP stack processes a malformed IP packet. Cisco has released free software updates that address this vulnerability.
Tags: advisory nx-os Software cisco-nx-os cisco-nexus cisco-security cisco-security-advisory free-software-updates dos-vulnerability
19:33
Oracle Java Web Start Remote Code Execution
» ‎ Packet Storm Security Advisories

A Java Web Start vulnerability exists in Oracle Java. The vulnerability can be exploited by remote unauthenticated attackers to execute arbitrary code on a vulnerable system.
Tags: java oracle web java-web-start oracle-java code-execution
19:02
Mandriva Linux Security Advisory 2012-020
» ‎ Packet Storm Security Advisories

Mandriva Linux Security Advisory 2012-020 - Cross-site scripting vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query_engine action to cmd.php. The updated packages have been patched to correct this issue.
Tags: mandriva security linux mandriva-linux arbitrary-web linux-security
14:46
Red Hat Security Advisory 2012-0135-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0135-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Tags: java hat red java-runtime-environment red-hat-security java-virtual-machine
14:46
Red Hat Security Advisory 2012-0116-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0116-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. The proc file system could allow a local, unprivileged user to obtain sensitive information or possibly cause integrity issues. Non-member VLAN packet handling for interfaces in promiscuous mode and also using the be2net driver could allow an attacker on the local network to cause a denial of service.
Tags: hat red security kernel-packages red-hat-security integrity-issues
14:46
Debian Security Advisory 2410-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 2410-1 - Jueri Aedla discovered an integer overflow in the libpng PNG library, which could lead to the execution of arbitrary code if a malformed image is processed.
Tags: advisory debian security png-library integer-overflow linux-security
14:45
Ubuntu Security Notice USN-1366-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1366-1 - Paul Wise discovered that debdiff did not properly sanitize its input when processing .dsc and .changes files. If debdiff processed a crafted file, an attacker could execute arbitrary code with the privileges of the user invoking the program. Raphael Geissert discovered that debdiff did not properly sanitize its input when processing source packages. If debdiff processed an original source tarball, with crafted filenames in the top-level directory, an attacker could execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: ubuntu security debdiff paul-wise raphael-geissert source-tarball source-packages
14:45
Red Hat Security Advisory 2012-0137-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0137-01 - TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. The texlive packages provide a number of utilities, including dvips. TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by a TeX Live utility, it could cause the utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility.
Tags: live lib tex based-buffer-overflow font-metrics red-hat-security
14:44
Red Hat Security Advisory 2012-0109-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0109-01 - The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent. A heap overflow flaw was found in the way QEMU-KVM emulated the e1000 network interface card. A privileged guest user in a virtual machine whose network interface is configured to use the e1000 emulated driver could use this flaw to crash the host or, possibly, escalate their privileges on the host.
Tags: hat red enterprise network-interface-card red-hat-security red-hat-enterprise
14:43
Debian Security Advisory 2409-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 2409-1 - Several vulnerabilities have been discovered in debdiff, a script used to compare two Debian packages, which is part of the devscripts package.
Tags: advisory debian security linux-security debian-linux debian-security
14:42
Red Hat Security Advisory 2012-0136-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0136-01 - The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. A heap-based buffer overflow flaw was found in the way the libvorbis library parsed Ogg Vorbis media files. If a specially-crafted Ogg Vorbis media file was opened by an application using libvorbis, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. Users of libvorbis should upgrade to these updated packages, which contain a backported patch to correct this issue. The desktop must be restarted for this update to take effect.
Tags: vorbis application ogg based-buffer-overflow red-hat-security proprietary-patent
9:11
Adobe Shockwave Player Parsing block_cout Memory Corruption
» ‎ Packet Storm Security Advisories

Adobe Shockwave Player versions 11.6.x.x suffer from a memory corruption vulnerability when parsing the field of KEY_ATOM of Director File.
Tags: shockwave player adobe director-file adobe-shockwave-player memory-corruption player-versions
8:22
Adobe Shockwave Player Parsing Heap Overflow
» ‎ Packet Storm Security Advisories

Adobe Shockwave Player versions 11.6.x.x suffer from a parsing cupt atom heap overflow vulnerability.
Tags: shockwave player adobe adobe-shockwave-player overflow-vulnerability player-versions
February 14, 2012
23:03
Secunia Security Advisory 47890
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Debian has issued an update for php5. This fixes a security issue, which can be exploited by malicious, local users to perform certain actions with escalated privileges.
Tags: advisory secunia security security-advisory security-issue
23:03
Secunia Security Advisory 47960
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for mysql. This fixes multiple vulnerabilities, which can be exploited by malicious, local users to gain knowledge of sensitive information or manipulate certain data or by malicious users to gain knowledge of sensitive information, manipulate certain data, or cause a DoS (Denial of Service).
Tags: advisory secunia security denial-of-service malicious-users
23:03
Secunia Security Advisory 47953
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - OpenVZ has issued an update for the kernel. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions, cause a DoS (Denial of Service), and gain escalated privileges.
Tags: advisory secunia security denial-of-service security-restrictions
23:03
Secunia Security Advisory 48009
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Oracle Java SE, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.
Tags: advisory secunia security oracle-java denial-of-service
23:03
Secunia Security Advisory 47984
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in the cformsII plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security security-advisory vulnerability
23:03
Secunia Security Advisory 47951
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A security issue has been reported in Mumble, which can be exploited by malicious, local users to disclose sensitive information.
Tags: advisory secunia security security-advisory security-issue
23:03
Secunia Security Advisory 47666
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Andrea Micalizzi has discovered a security issue and a vulnerability in Lenovo ThinkManagement Console, which can be exploited by malicious people to manipulate certain data and compromise a user's system.
Tags: advisory secunia security andrea-micalizzi micalizzi s-system
18:21
Secunia Security Advisory 47985
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for libvorbis. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
18:21
Secunia Security Advisory 48011
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for java-1.6.0-openjdk. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.
Tags: advisory secunia security denial-of-service security-advisory
18:20
Secunia Security Advisory 47977
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for MozillaFirefox. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security suse s-system security-advisory
18:20
Secunia Security Advisory 47888
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Netragard has reported a vulnerability in Sonexis ConferenceManager, which can be exploited by malicious people to bypass certain security restrictions.
Tags: advisory secunia security security-restrictions security-advisory
18:20
Secunia Security Advisory 47945
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Zimbra Collaboration Suite, where two have unknown impacts and one can be exploited by malicious people to disclose potentially sensitive information and hijack a user's session.
Tags: advisory secunia security collaboration-suite security-advisory
16:10
Microsoft Security Bulletin Summary For February 2012
» ‎ Packet Storm Security Advisories

This bulletin summary lists 9 Microsoft security bulletins released for February, 2012.
Tags: microsoft bulletin security microsoft-security-bulletin
16:07
Technical Cyber Security Alert 2012-45A
» ‎ Packet Storm Security Advisories

Technical Cyber Security Alert 2012-45A - There are multiple vulnerabilities in Microsoft Windows, Internet Explorer, Microsoft .NET Framework, Silverlight, Office, and Microsoft Server Software. Microsoft has released updates to address these vulnerabilities.
Tags: microsoft technical cyber microsoft-server-software explorer-microsoft microsoft-net-framework
16:06
Mandriva Linux Security Advisory 2012-019
» ‎ Packet Storm Security Advisories

Mandriva Linux Security Advisory 2012-019 - tables/apr_hash.c in the Apache Portable Runtime library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service via crafted input to an application that maintains a hash table. APR has been upgraded to the latest version which holds many improvements over the previous versions and is not vulnerable to this issue.
Tags: mandriva hash linux mandriva-linux hash-values hash-table
15:59
Ubuntu Security Notice USN-1365-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1365-1 - It was discovered that Puppet would allow remote ralsh under certain circumstances. An attacker on an authenticated puppet node could exploit this to view or manipulate resources on other Puppet nodes.
Tags: ubuntu puppet security security-notice attacker
February 13, 2012
19:59
Secunia Security Advisory 47946
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Microsoft Visio Viewer, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security microsoft-visio-viewer s-system
19:59
Secunia Security Advisory 47911
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Two vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges.
Tags: advisory secunia security security-advisory microsoft-windows
19:59
Secunia Security Advisory 48028
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Microsoft Internet Explorer, which can be exploited by malicious people to bypass certain security restrictions, disclose potentially sensitive information, and compromise a user's system.
Tags: advisory secunia security s-system security-restrictions
19:58
Secunia Security Advisory 48031
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Microsoft Internet Explorer, which can be exploited by malicious people to bypass certain security restrictions.
Tags: advisory secunia security security-restrictions security-advisory
19:58
Secunia Security Advisory 48030
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Two vulnerabilities have been reported in Microsoft .NET Framework and Microsoft Silverlight, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security microsoft-silverlight microsoft-net-framework s-system
19:58
Secunia Security Advisory 48029
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Microsoft SharePoint Server and Microsoft SharePoint Foundation, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security microsoft-sharepoint-server security-advisory
19:58
Secunia Security Advisory 47949
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
19:58
Secunia Security Advisory 47937
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Two vulnerabilities have been discovered in Fork CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security security-advisory vulnerabilities
19:58
Secunia Security Advisory 48027
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in ALFTP, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security alftp s-system
19:58
Secunia Security Advisory 48008
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in multiple Mozilla products, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
16:39
Mandriva Linux Security Advisory 2012-018
» ‎ Packet Storm Security Advisories

Mandriva Linux Security Advisory 2012-018 - Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors that trigger failure of an nsXBLDocumentInfo::ReadPrototypeBindings function call.
Tags: mandriva security linux mandriva-linux linux-security denial-of-service
16:38
Slackware Security Advisory - vsftpd Updates
» ‎ Packet Storm Security Advisories

Slackware Security Advisory - New vsftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to work around a vulnerability in glibc.
Tags: advisory slackware security slackware-11 vulnerability
16:37
Slackware Security Advisory - proftpd Updates
» ‎ Packet Storm Security Advisories

Slackware Security Advisory - New proftpd packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues.
Tags: advisory slackware security slackware-11 security-issues proftpd
14:08
Red Hat Security Advisory 2012-0126-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0126-01 - The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.
Tags: glibc red application based-buffer-overflow math-libraries red-hat-security
14:08
Red Hat Security Advisory 2012-0128-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0128-01 - The Apache HTTP Server is a popular web server. It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request, or by using a specially-crafted URI. The httpd server included the full HTTP header line in the default error page generated when receiving an excessively long or malformed header. Malicious JavaScript running in the server's domain context could use this flaw to gain access to httpOnly cookies.
Tags: server http red uri apache-http-server red-hat-security reverse-proxy
14:07
Red Hat Security Advisory 2012-0125-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0125-01 - The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application.
Tags: glibc red application based-buffer-overflow math-libraries red-hat-security
14:06
Red Hat Security Advisory 2012-0127-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0127-01 - MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. These updated packages upgrade MySQL to version 5.0.95.
Tags: server red mysql mysql-database-server red-hat-security server-daemon
13:16
Slackware Security Advisory - glibc Updates
» ‎ Packet Storm Security Advisories

Slackware Security Advisory - New glibc packages are available for Slackware 13.1, 13.37, and -current to fix a security issue.
Tags: advisory slackware security security-issue
13:14
Slackware Security Advisory - php Updates
» ‎ Packet Storm Security Advisories

Slackware Security Advisory - New php packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues.
Tags: advisory slackware security slackware-12 security-issues
13:12
Slackware Security Advisory - httpd Updates
» ‎ Packet Storm Security Advisories

Slackware Security Advisory - New httpd packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. The apr-util package has also been updated to the latest version.
Tags: advisory slackware security slackware-12 security-issues
13:10
Ubuntu Security Notice USN-1359-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1359-1 - It was discovered that Tomcat incorrectly performed certain caching and recycling operations. A remote attacker could use this flaw to obtain read access to IP address and HTTP header information in certain cases. This issue only applied to Ubuntu 11.10. It was discovered that Tomcat computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. A remote attacker could cause a denial of service by sending many crafted parameters. Various other issues were also addressed.
Tags: ubuntu notice security hash-values denial-of-service security-notice
13:10
Ubuntu Security Notice USN-1364-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1364-1 - A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: ubuntu notice security andy-whitcroft permission-checks security-modules linux-security
13:10
Ubuntu Security Notice USN-1363-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1363-1 - A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: user ubuntu security andy-whitcroft programmable-interval-timer permission-checks security-modules
13:09
Debian Security Advisory 2408-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 2408-1 - Several vulnerabilities have been discovered in PHP, the web scripting language.
Tags: advisory debian security web-scripting-language linux-security debian-linux
13:09
Ubuntu Security Notice USN-1362-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1362-1 - Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys programmable-interval-timer kernel-module denial-of-service
13:09
Ubuntu Security Notice USN-1361-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1361-1 - Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys programmable-interval-timer kernel-module denial-of-service
13:08
Ubuntu Security Notice USN-1358-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1358-2 - USN 1358-1 fixed multiple vulnerabilities in PHP. The fix for CVE-2012-0831 introduced a regression where the state of the magic_quotes_gpc setting was not correctly reflected when calling the ini_get() function. Various other issues were also addressed.
Tags: ubuntu notice security security-notice usn regression
13:07
Ubuntu Security Notice USN-1360-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1360-1 - Andrew McCreight and Olli Pettay discovered a use-after-free vulnerability in the XBL bindings. An attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox.
Tags: ubuntu notice security andrew-mccreight application-crash denial-of-service mccreight
February 12, 2012
20:33
Secunia Security Advisory 47935
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A security issue has been reported in Zero Install, which can be exploited by malicious people to conduct spoofing attacks.
Tags: advisory secunia security security-advisory security-issue
20:33
Secunia Security Advisory 48017
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Slackware has issued an update for proftpd. This fixes a vulnerability, which can be exploited by malicious users to compromise a vulnerable system.
Tags: advisory secunia security malicious-users security-advisory
20:33
Secunia Security Advisory 47948
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in PBBoard, which can be exploited by malicious people to conduct cross-site request forgery attacks.
Tags: advisory secunia security security-advisory forgery
20:33
Secunia Security Advisory 48021
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A security issue has been discovered in NetSurf, which can be exploited by malicious, local users to disclose sensitive information.
Tags: advisory secunia security netsurf security-advisory
20:33
Secunia Security Advisory 47798
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - MustLive has reported a vulnerability in D-Link DAP-1150, which can be exploited by malicious people to conduct cross-site request forgery attacks.
Tags: advisory secunia security security-advisory forgery
18:33
Kloxo LxCenter CP 6.1.10 Cross Site Scripting
» ‎ Packet Storm Security Advisories

Kloxo LxCenter CP version 6.1.10 suffers from a cross site scripting vulnerability.
Tags: lxcenter cross kloxo version-6 vulnerability
18:30
Mandriva Linux Security Advisory 2012-017
» ‎ Packet Storm Security Advisories

Mandriva Linux Security Advisory 2012-017 - Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service or possibly execute arbitrary code.
Tags: mandriva security linux mandriva-linux linux-security denial-of-service
18:06
Secunia Security Advisory 48024
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A security issue and some vulnerabilities have been reported in Horde Groupware Webmail Edition, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks and compromise a vulnerable system.
Tags: advisory secunia security cross-site-scripting security-advisory
17:07
Secunia Security Advisory 47845
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - AppSec has reported a security issue in UberSocial for Twitter for Android, which can be exploited by malicious people to bypass certain security restrictions.
Tags: advisory secunia security twitter security-restrictions
17:07
Secunia Security Advisory 47972
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A security issue and a vulnerability have been reported in Horde Groupware, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a vulnerable system.
Tags: advisory secunia security security-advisory security-issue
17:07
Secunia Security Advisory 47914
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - AppSec has reported a security issue in TWIDROYD Legacy for Twitter for Android, which can be exploited by malicious people to bypass certain security restrictions.
Tags: advisory secunia security twitter security-restrictions
7:59
Yahoo! Messenger 11.5 Buffer Overflow
» ‎ Packet Storm Security Advisories

Yahoo! Messenger version 11.5 suffers from a buffer overflow vulnerability.
Tags: messenger buffer yahoo buffer-overflow-vulnerability messenger-version
February 11, 2012
23:50
Secunia Security Advisory 47995
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for powerdns. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security suse denial-of-service security-advisory
23:50
Secunia Security Advisory 47973
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Apache MyFaces, which can be exploited by malicious people to disclose certain sensitive information.
Tags: advisory secunia security apache-myfaces security-advisory
23:50
Secunia Security Advisory 47893
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Carlos Pantelides has discovered a vulnerability in multiple NetBeans plugins, which can be exploited by malicious people to conduct spoofing attacks.
Tags: advisory secunia security carlos-pantelides security-advisory vulnerability
23:50
Secunia Security Advisory 47975
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for jbossweb. This fixes a weakness, which can be exploited by malicious, local users to disclose potentially sensitive information.
Tags: advisory secunia security security-advisory red-hat
23:50
Secunia Security Advisory 47924
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A security issue has been discovered in surf, which can be exploited by malicious, local users to disclose sensitive information.
Tags: advisory secunia security security-advisory security-issue
23:50
Secunia Security Advisory 47958
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for MozillaFirefox. This fixes multiple vulnerabilities, where one has an unknown impact and others can be exploited by malicious people to disclose sensitive information and compromise a user's system.
Tags: advisory secunia security suse s-system security-advisory
23:50
Secunia Security Advisory 47963
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for MozillaFirefox. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system.
Tags: advisory secunia security suse s-system security-advisory
23:50
Secunia Security Advisory 47983
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for sysconfig. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security suse s-system security-advisory
23:50
Secunia Security Advisory 47991
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for squid3. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security suse denial-of-service security-advisory
23:50
Secunia Security Advisory 47957
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for curl. This fixes a weakness, which can be exploited by malicious people to conduct spoofing attacks.
Tags: advisory secunia security suse security-advisory
23:50
Secunia Security Advisory 47994
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for mozilla-xulrunner192. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system.
Tags: advisory secunia security suse s-system security-advisory
23:50
Secunia Security Advisory 47964
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Prabhu S Angadi has discovered a vulnerability in OfficeSIP Server, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security s-angadi angadi denial-of-service
23:50
Secunia Security Advisory 47990
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for dovecot20. This fixes a security issue, which can be exploited by malicious people to conduct spoofing attacks.
Tags: advisory secunia security suse security-advisory security-issue
23:50
Secunia Security Advisory 47989
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for ruby. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security suse denial-of-service security-advisory
23:50
Secunia Security Advisory 47980
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for MozillaFirefox. This fixes a weakness, a security issue, and multiple vulnerabilities, which can be exploited by malicious, local users to disclose certain sensitive information and by malicious people to bypass certain security restrictions, disclose certain sensitive information, and compromise a user's system.
Tags: advisory secunia security suse s-system security-restrictions
23:50
Secunia Security Advisory 47979
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for the kernel. This fixes multiple weaknesses and vulnerabilities, which can be exploited by malicious, local users to disclose system information and cause a DoS (Denial of Service) and by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.
Tags: advisory secunia security suse denial-of-service security-advisory
23:50
Secunia Security Advisory 47916
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Han Lee has discovered a weakness in AjaXplorer, which can be exploited by malicious users to disclose certain sensitive information.
Tags: advisory secunia security lee malicious-users security-advisory
23:50
Secunia Security Advisory 47956
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for the kernel. This fixes multiple weaknesses and vulnerabilities, which can be exploited by malicious, local users to disclose certain system information, cause a DoS (Denial of Service) and by malicious people to cause a DoS and compromise a vulnerable system.
Tags: advisory secunia security suse denial-of-service security-advisory
23:49
Secunia Security Advisory 47992
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for kvm. This fixes a weakness and a vulnerability, which can be exploited by malicious, local users in a guest virtual machine to gain escalated privileges.
Tags: advisory secunia security suse security-advisory virtual-machine
February 10, 2012
22:20
Mandriva Linux Security Advisory 2012-016
» ‎ Packet Storm Security Advisories

Mandriva Linux Security Advisory 2012-016 - A File Inclusion vulnerability was discovered and corrected in GLPI. This advisory provides the latest version of GLPI that is not vulnerable to this issue.
Tags: mandriva security linux mandriva-linux linux-security security-advisory
22:16
Microsoft Security Bulletin Advance Notification For February 2012
» ‎ Packet Storm Security Advisories

This is an advance notification of 9 security bulletins that Microsoft is intending to release on February 14, 2012.
Tags: advance microsoft security microsoft-security-bulletin-advance-notification microsoft-security-bulletin security-bulletins
21:35
Indianapolis Superbowl 2012 SQL Injection
» ‎ Packet Storm Security Advisories

The Indianapolis Superbowl 2012 website suffered from multiple remote SQL injection vulnerabilities.
Tags: injection superbowl sql indianapolis
14:17
Mandriva Linux Security Advisory 2012-015
» ‎ Packet Storm Security Advisories

Mandriva Linux Security Advisory 2012-015 - Multiple file parser and NULL pointer vulnerabilities including a RLC dissector buffer overflow was found and corrected in Wireshark. This advisory provides the latest version of Wireshark which is not vulnerable to these issues.
Tags: mandriva security linux mandriva-linux null-pointer buffer-overflow
2:21
Secunia Security Advisory 47987
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for gnutls. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.
Tags: advisory secunia security suse denial-of-service security-advisory
2:07
Secunia Security Advisory 47901
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Luigi Auriemma has discovered multiple vulnerabilities in RabidHamster R4, which can be exploited by malicious people to disclose potentially sensitive information and compromise a vulnerable system.
Tags: advisory secunia security luigi-auriemma auriemma security-advisory
2:07
Secunia Security Advisory 47927
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in IBM solidDB, which can be exploited by malicious users to cause a DoS (Denial of Service).
Tags: advisory secunia security denial-of-service malicious-users
1:28
Secunia Security Advisory 47895
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Oracle has acknowledged a weakness in Pidgin included in Solaris, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security denial-of-service pidgin
1:28
Secunia Security Advisory 47926
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Two vulnerabilities have been reported in ImageMagick, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
Tags: advisory secunia security denial-of-service security-advisory
1:28
Secunia Security Advisory 47965
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Attachmate has acknowledged a vulnerability in multiple Reflection products, which can be exploited by malicious people to disclose potentially sensitive information.
Tags: advisory secunia security attachmate security-advisory
1:28
Secunia Security Advisory 47969
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Vulnerability-Lab has discovered a vulnerability in Dolibarr ERP/CRM, which can be exploited by malicious users to conduct SQL injection attacks.
Tags: advisory secunia security malicious-users security-advisory
1:28
Secunia Security Advisory 47982
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for opera. This fixes a weakness and a vulnerability, which can be exploited by malicious people to disclose potentially sensitive information and bypass certain security restrictions.
Tags: advisory secunia security suse security-restrictions security-advisory
1:28
Secunia Security Advisory 47934
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in Pluck, which can be exploited by malicious people to conduct cross-site request forgery attacks.
Tags: advisory secunia security security-advisory pluck
1:28
Secunia Security Advisory 47978
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for apache2. This fixes two weaknesses and a vulnerability, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to bypass certain security restrictions.
Tags: advisory secunia security suse security-restrictions security-advisory
1:28
Secunia Security Advisory 47988
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for curl. This fixes a weakness and two vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, disclose potentially sensitive information, hijack a user's session, and manipulate certain data.
Tags: advisory secunia security suse security-restrictions security-advisory
1:28
Secunia Security Advisory 47986
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for lighttpd. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security suse denial-of-service security-advisory
1:27
Secunia Security Advisory 47925
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for openssl. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose sensitive information, cause a DoS (Denial of Service), and potentially compromise an application using the library.
Tags: advisory secunia security denial-of-service security-advisory
1:27
Secunia Security Advisory 47942
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in XRay CMS, which can be exploited by malicious people to conduct SQL injection attacks.
Tags: advisory secunia security security-advisory xray
1:27
Secunia Security Advisory 47918
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Emilien Girault has discovered a vulnerability in GLPI, which can be exploited by malicious users to compromise a vulnerable system.
Tags: advisory secunia security glpi malicious-users
1:27
Secunia Security Advisory 47882
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in MyBB, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks.
Tags: advisory secunia security cross-site-scripting mybb
1:27
Secunia Security Advisory 47947
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in Gazie, which can be exploited by malicious people to conduct cross-site request forgery attacks.
Tags: advisory secunia security security-advisory forgery
1:27
Secunia Security Advisory 47966
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Luigi Auriemma has discovered two vulnerabilities in RabidHamster R2 Extreme, which can be exploited by malicious users to disclose potentially sensitive information and compromise a vulnerable system.
Tags: advisory secunia security luigi-auriemma auriemma malicious-users
1:27
Secunia Security Advisory 47878
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for php5. This fixes a security issue and multiple vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, cause a DoS (Denial of Service), and compromise a vulnerable system.
Tags: advisory secunia security denial-of-service security-restrictions
February 09, 2012
23:46
Ubuntu Security Notice USN-1358-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1358-1 - It was discovered that PHP computed hash values for form parameters without restricting the ability to trigger hash collisions predictably. This could allow a remote attacker to cause a denial of service by sending many crafted parameters. ATTENTION: this update changes previous PHP behavior by limiting the number of external input variables to 1000. This may be increased by adding a "max_input_vars" directive to the php.ini configuration file. See http://www.php.net/manual/en/info.configuration.php#ini.max-input-vars for more information. Various other issues were also addressed.
Tags: ubuntu php security hash-values input-variables configuration-php
23:46
Red Hat Security Advisory 2012-0108-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0108-01 - JBoss Cache is the clustering backbone for data distribution in JBoss Enterprise Application Platform. It provides the backing implementation for web session replication, stateful session bean replication and entity caching. It was found that NonManagedConnectionFactory would log the username and password in plain text when an exception was thrown. This could lead to the exposure of authentication credentials if local users had permissions to read the log file. Warning: Before applying this update, back up your existing JBoss Enterprise Application Platform's "jboss-as/server/[PROFILE]/lib/jbosscache-core.jar" file.
Tags: jboss hat red jboss-enterprise-application-platform authentication-credentials red-hat-security
23:44
Ubuntu Security Notice USN-1357-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1357-1 - It was discovered that the elliptic curve cryptography (ECC) subsystem in OpenSSL, when using the Elliptic Curve Digital Signature Algorithm (ECDSA) for the ECDHE_ECDSA cipher suite, did not properly implement curves over binary fields. This could allow an attacker to determine private keys via a timing attack. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04. Adam Langley discovered that the ephemeral Elliptic Curve Diffie-Hellman (ECDH) functionality in OpenSSL did not ensure thread safety while processing handshake messages from clients. This could allow a remote attacker to cause a denial of service via out-of-order messages that violate the TLS protocol. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04. Various other issues were also addressed.
Tags: lts ubuntu curve adam-langley digital-signature-algorithm elliptic-curve curve-cryptography
23:43
Red Hat Security Advisory 2012-0107-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0107-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Using the SG_IO ioctl to issue SCSI requests to partitions or LVM volumes resulted in the requests being passed to the underlying block device. If a privileged user only had access to a single partition or LVM volume, they could use this flaw to bypass those restrictions and gain read and write access to the entire block device. Refer to Red Hat Knowledgebase article DOC-67874, linked to in the References, for further details about this issue.
Tags: hat red security kernel-packages red-hat-security linux-kernel
23:42
Debian Security Advisory 2407-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 2407-1 - It was discovered that a malicious CVS server could cause a heap overflow in the CVS client, potentially allowing the server to execute arbitrary code on the client.
Tags: advisory debian security cvs-client cvs-server linux-security
23:41
Debian Security Advisory 2406-1
» ‎ Packet Storm Security Advisories

Debian Linux Security Advisory 2406-1 - Several vulnerabilities have been discovered in Icedove, Debian's variant of the Mozilla Thunderbird code base.
Tags: advisory debian security mozilla-thunderbird linux-security debian-linux
18:01
Secunia Security Advisory 47941
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in the Finder module for Drupal, which can be exploited by malicious people to conduct script insertion attacks.
Tags: advisory secunia security security-advisory drupal
18:01
Secunia Security Advisory 47915
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in the Finder module for Drupal, which can be exploited by malicious users to compromise a vulnerable system.
Tags: advisory secunia security malicious-users security-advisory
18:01
Secunia Security Advisory 47943
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in the Finder module for Drupal, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to conduct script insertion attacks.
Tags: advisory secunia security malicious-users security-advisory
18:01
Secunia Security Advisory 47967
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for the kernel. This fixes some vulnerabilities, which can be exploited by malicious, local users and malicious, local users in a guest virtual machine to gain escalated privileges and by malicious, local users and malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security denial-of-service security-advisory
3:41
Secunia Security Advisory 47894
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in MySQL, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security security-advisory vulnerability
3:41
Secunia Security Advisory 47940
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for xulrunnner. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system.
Tags: advisory secunia security s-system security-advisory
3:41
Secunia Security Advisory 47939
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for thunderbird. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system.
Tags: advisory secunia security s-system security-advisory
3:41
Secunia Security Advisory 47938
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Google Chrome, where some have an unknown impact and others can be exploited by malicious people to bypass certain security restrictions, manipulate certain data, and compromise a user's system.
Tags: advisory security secunia s-system security-restrictions
3:41
Secunia Security Advisory 47933
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Two vulnerabilities have been reported in Wonderware HMI Reports, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user's system.
Tags: advisory secunia security hmi-reports s-system
3:41
Secunia Security Advisory 47883
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in CA Total Defense, which can be exploited by malicious people to disclose potentially sensitive information and conduct SQL injection attacks.
Tags: advisory secunia security security-advisory vulnerabilities
3:41
Secunia Security Advisory 47921
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Zero Science Lab has reported a vulnerability in SciTools Understand, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security science-lab s-system
3:41
Secunia Security Advisory 47862
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in Apache APR, which can be exploited by malicious people to cause a DoS (Denial of Service).
Tags: advisory secunia security denial-of-service security-advisory
3:41
Secunia Security Advisory 47867
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in Novell iPrint Client, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security novell-iprint s-system
3:41
Secunia Security Advisory 47875
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - High-Tech Bridge SA has discovered multiple vulnerabilities in zenphoto, which can be exploited by malicious users to conduct SQL injection attacks and by malicious people to conduct cross-site scripting attacks and compromise a vulnerable system.
Tags: advisory secunia security malicious-users security-advisory
3:41
Secunia Security Advisory 47838
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - AppSec has reported a security issue in 360 MobileSafe for Android, which can be exploited by malicious people to bypass certain security restrictions.
Tags: advisory secunia security mobilesafe security-restrictions
3:41
Secunia Security Advisory 47766
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Vulnerability Lab has reported multiple vulnerabilities in freelancerKit, which can be exploited by malicious users to conduct script insertion and SQL injection attacks.
Tags: advisory secunia security sql-injection malicious-users
3:41
Secunia Security Advisory 47869
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Debian has issued an update for cvs. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
3:41
Secunia Security Advisory 47931
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in the Revisioning module for Drupal, which can be exploited by malicious users to conduct script insertion attacks.
Tags: advisory secunia security malicious-users security-advisory
3:40
Secunia Security Advisory 47930
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for squirrelmail. This fixes some weaknesses and multiple vulnerabilities, which can be exploited by malicious users to disclose certain system information and conduct script insertion attacks and by malicious people to conduct script insertion and cross-site scripting attacks, bypass certain security restrictions, or cause a DoS (Denial of Service).
Tags: advisory secunia security denial-of-service malicious-users security-restrictions
3:40
Secunia Security Advisory 47880
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Debian has issued an update for icedove. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system.
Tags: advisory secunia security s-system security-advisory
3:40
Secunia Security Advisory 47944
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A weakness has been reported in HP System Management Homepage, which can be exploited by malicious people to disclose potentially sensitive information and hijack a user's session.
Tags: advisory secunia security hp-system management-homepage
3:40
Secunia Security Advisory 47928
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Red Hat has issued an update for mysql. This fixes multiple vulnerabilities, which can be exploited by malicious, local users to gain knowledge of sensitive information and manipulate certain data, by malicious users to gain knowledge of sensitive information, manipulate certain data, or cause a DoS (Denial of Service), or by malicious people to cause a DoS.
Tags: advisory secunia security denial-of-service malicious-users
3:40
Secunia Security Advisory 47477
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Parvez Anwar has discovered a vulnerability in PhotoLine, which can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security photoline parvez s-system
February 08, 2012
14:42
Zero Day Initiative Advisory 12-031
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-031 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Server. Authentication is not required to exploit this vulnerability. The flaw exists within the mod_ipp apache module component of the iprint-server, which listens by default on 631/tcp. During the handling of get-printer-attributes requests containing a attributes-natural-language attribute cause a validation routine to be hit. When validating this parameter the contents of the attribute are copied, without validation, to a fixed length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the process.
Tags: day zero vulnerability novell-iprint printer-attributes server-authentication

Skip to page: 1 2 3 ... 36

← Packet Storm Security Headlines Packet Storm Security Exploits →

jetlib.sec » Packet Storm Security Advisories

Feeds

Packet Storm Security Advisories

Tags: server http red apache-http-server red-hat-security reverse-proxy

Tags: java hat red java-runtime-environment red-hat-security java-virtual-machine

Tags: cvs client red concurrent-version-system based-buffer-overflow cvs-client

Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

Tags: advisory sudo red red-hat-security sudoers security-advisory

Tags: hat file red kernel-network red-hat-security mount-nfs

Tags: hat network red red-hat-network red-hat-security network-content

Tags: hat corruption red memory-corruption red-hat-security correct-memory

Tags: server unix samba server-message-block open-source-implementation samba-clients

Tags: hat red system ike red-hat-security system-scripts network-interfaces

Tags: advisory debian security buffer-overflows flexible-interface linux-security

Tags: hat red security network-interface-card red-hat-security privileged-guest

Tags: imagemagick hat red x-window imagemagick-utilities x-window-system red-hat-security

Tags: red cron security vixie-cron unix-daemon red-hat-security

Tags: library red application regular-expression-library c-standard-library invalid-pointer

Tags: luci conga red red-hat-security arbitrary-web administration-application

Tags: hat red security ziv-welch decompression-algorithm common-unix-printing lempel-ziv

Tags: user hat red x.org x-window open-source-implementation graphical-user-interfaces x-window-system

Tags: kvm red linux red-hat-security linux-kernel intel-64

Tags: group hat red network-authentication-system red-hat-security symmetric-encryption

Tags: kernel security linux kernel-packages red-hat-security linux-kernel

Tags: hat file red red-hat-security linux-package login-program

Tags: hat red busybox ziv red-hat-security system-failures

Tags: kernel kexec ssh target-server red-hat-security linux-kernel

Tags: advisory secunia security security-advisory hitachi

Tags: hat libpng red png-image-format based-buffer-overflow red-hat-security

Tags: ubuntu notice security denial-of-service ogg-files arbitrary-code

Tags: advisory debian security ogg-vorbis linux-security debian-linux

Tags: advisory debian security linux-security debian-linux debian-security

Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

Tags: advisory debian security ogg-vorbis linux-security debian-linux

Tags: injection denial sql elba denial-of-service information-disclosure

Tags: advisory secunia security suse security-advisory virtual-machine

Tags: advisory secunia security security-advisory vulnerability

Tags: advisory secunia security s-system security-advisory

Tags: advisory secunia security security-advisory vulnerability

Tags: advisory secunia security sap-netweaver security-advisory

Tags: advisory secunia security aquis s-system

Tags: advisory secunia security tiki-wiki security-advisory

Tags: advisory secunia security security-advisory vulnerability

Tags: s-system security-restrictions secunia

Tags: advisory secunia security s-system security-advisory

Tags: advisory secunia security security-advisory security-issue

Tags: advisory secunia security s-system security-advisory

Tags: advisory secunia security s-system security-restrictions

Tags: advisory secunia security security-advisory iranian

Tags: advisory secunia security suse denial-of-service security-restrictions

Tags: advisory secunia security absolute-privacy security-restrictions

Tags: advisory secunia security frams file-exchange

Tags: advisory secunia security security-advisory forgery

Tags: advisory secunia security security-advisory ubuntu

Tags: advisory secunia security suse denial-of-service security-advisory

Tags: advisory secunia security dell-secureworks cisco-ironport secureworks security-advisory

Tags: advisory secunia security denial-of-service security-advisory

Tags: advisory secunia security s-system security-advisory

Tags: advisory secunia security s-system security-advisory

Tags: advisory secunia security roger-wemyss application-firewall wemyss

Tags: advisory secunia security s-system security-advisory

Tags: advisory secunia security denial-of-service security-restrictions

Tags: buffer netweaver sap buffer-overflow-vulnerability based-buffer-overflow

Tags: mandriva security linux mandriva-linux linux-security security-advisory

Tags: disclosure php information code-execution information-disclosure globals

Tags: hpsbpi bulletin security potential-security-vulnerability hp-printers digital-senders

Tags: swf adobe security red-hat-security web-browser-plug adobe-flash-player

Tags: ubuntu libpng security denial-of-service automated-system

Tags: user ubuntu thunderbird nicolas-gregoire memory-corruption xslt-stylesheet

Tags: ubuntu libpng security denial-of-service automated-system

Tags: ubuntu libpng security denial-of-service automated-system

Tags: advisory secunia security s-system security-advisory

Tags: advisory secunia security datapower security-advisory

Tags: advisory secunia security malicious-users security-restrictions

Tags: advisory secunia security malicious-users security-advisory

Tags: advisory secunia security suse denial-of-service security-advisory