Ubuntu Security Notice 516-1 - Paul Martin discovered that xfs_fsr creates a temporary directory with insecure permissions. This allows a local attacker to exploit a race condition in xfs_fsr to read or overwrite arbitrary files on xfs filesystems.
82aac570fccbd6c363ec09ea8a3e0884bbbacb593c990708560f2b4cd266e2bdGentoo Linux Security Advisory GLSA 200709-14 - Nikolaos Rangos discovered a vulnerability in ClamAV which exists because the recipient address extracted from email messages is not properly sanitized before being used in a call to popen() when executing sendmail (CVE-2007-4560). Also, NULL-pointer dereference errors exist within the cli_scanrtf() function in libclamav/rtf.c and Stefanos Stamatis discovered a NULL-pointer dereference vulnerability within the cli_html_normalise() function in libclamav/htmlnorm.c (CVE-2007-4510). Versions less than 0.91.2 are affected.
f5268da5fa00432a3fdf6c08174761a93c9465ba542aa5f73fb11dc7a3e3149bGentoo Linux Security Advisory GLSA 200709-13 - Sebastian Krahmer from the SUSE Security Team discovered two off-by-one errors in the function f_name() in file sender.c when processing overly long directory names. rsync versions less than 2.6.9-r3 are affected.
a1c6e6f0b93a29f066d3b8108a6fecd3c706774a488b30919437eb69f53a5a02Mandriva Linux Security Advisory - An integer overflow in the TIFF parser in OpenOffice.org prior to version 2.3 allows remote attackers to execute arbitrary code via a TIFF file with crafted values which triggers the allocation of an incorrect amount of memory which results in a heap-based buffer overflow.
873fe58eb3cdeaf930f82bc8bc62da634d2e3943e43cfb9ded37034dec99c419Vigile CMS version 1.8 suffers from multiple cross site scripting vulnerabilities.
f85f1842c504773acebdb3cddfb1cec1b3e2b6ee9727521d09993c8b8683c869PHP-Nuke appears to suffer from an administrative bypass vulnerability.
e65a445487a62365e031940ea2b1cc18182a8c6b24d1c07777133c6ea0e0eb5cWebED version 0.8999 suffers from multiple remote file inclusion vulnerabilities.
34dbdf7e63f5798d8ac025e390d5bbd91229bc4459f7966a74781891b99a7f08phpBB Xs 2 suffers from a persistent cross site scripting vulnerability in profile.php.
4fec861ae5177d3e0f4134c7ec8ae2a261307f4756c44d8f2f2ff8fa52f2d56aWebBatch from Wilson WindowWare, Inc. suffers from a cross site scripting vulnerability.
df497bc697d2054823e29596e47465d6b29b65e2016384cd968a724f014094d8Bugzilla versions 2.23.3 and above suffer from an unauthorized access vulnerability.
9cdbc4ae98ad0c6734ee4a75284371566dd283a705896613b758a865f702613aLighttpd version 1.4.17 and below FastCGI header overflow remote exploit.
7c39ec7d2d16e0c3a90deba300e963a021c303d9e764b6adc815b8dd389eab3aSecunia Security Advisory - SGI has issued multiple updates for SGI Advanced Linux Environment. These fix some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.
4a1a19941df7a4cebb931f48aee1dddb3c5082529f8d3c098fea0ccebe71fd41Secunia Security Advisory - Red Hat has issued an update for libvorbis. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise an application using the library.
a794308809cf34d02d022a44dcd9818f4ce3543889169a734b8260fb9310f7f1Secunia Security Advisory - A security issue has been reported in HP-UX, which may result in password problems not being detected.
f8c817531280e19a134157aacb10fde2ed43b2c101ad468d97db972bf3aece93Secunia Security Advisory - Mu Security research team has reported some vulnerabilities in Dibbler, which can be exploited by malicious people to cause a DoS (Denial of Service).
cd78ef28fdf7465546b195f999e6b054062a017f39d2392b17015b894822725fSecunia Security Advisory - void has discovered a vulnerability in Mercury Mail Transport System, which can be exploited by malicious users to compromise a vulnerable system.
ebbc17382760e5348555f15ca9f2d144eb14ff1880e3b83ebd621c1616414a4aSecunia Security Advisory - Two vulnerabilities have been reported in IBM Tivoli Storage Manager (TSM) Client, which can be exploited by malicious people to disclose sensitive information or potentially compromise a vulnerable system.
9853fa2da450d354024af24cc9aa00b068dfd8e985b77d7e7d87583e9a3d86ceSecunia Security Advisory - nights.shadow has discovered some vulnerabilities in Phormer, which can be exploited by malicious people to conduct cross-site scripting attacks.
6c5cb03852f9a1755f3cf947dab5341d91ad8d6108274f2d6e12d9ec0ced1005Secunia Security Advisory - KDE has acknowledged a security issue in KDM, which can be exploited by malicious, local users to bypass certain security restrictions.
fbbdae25ed5a3fa4e0196f997f8a135352432cab667f8ac260c0753196b4979dSecunia Security Advisory - Red Hat has issued an update for nfs-utils-lib. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
3a93085071ce24a4d43c173df7333e21b197e0251385167ae30f9758f3fdb718Secunia Security Advisory - Red Hat has issued an update for xorg-x11. This fixes a vulnerability, which potentially can be exploited by malicious, local users to gain escalated privileges.
a21a095da94f03047d8d87819810c29ee32d1fa4b93710aa0ff37fd68d5c7335Secunia Security Advisory - rPath has issued an update for gdm. This fixes a vulnerability, which can be exploited by malicious, local users to cause a DoS (Denial of Service).
55f44b412629eb4d912e8539e9f5f911471e9221f30c2bd099e345ce2958a7c3Secunia Security Advisory - Ubuntu has issued an update for t1lib. This fixes a vulnerability, which can be exploited by malicious users to potentially compromise a vulnerable system.
dad432bcdf665b15e828ef7c7081b5794996ff58a52203ca2d57ab0eeda76123Secunia Security Advisory - str0ke has reported a vulnerability in OneCMS, which can be exploited by malicious people to conduct SQL injection attacks.
9f7e63d9be8ea94e771cbe8aeb5ffbeacb39df0e1688c12663fe4618d46c829bSecunia Security Advisory - VMware has issued an update for VMware ESX Server. This fixes some vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions, perform certain actions with escalated privileges, or to cause a DoS (Denial of Service), by malicious users to bypass certain security restrictions, and by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.
c5d223fcffa5b9d2b6c30ee05e5bc289ddaa4a2a443eeb826a5a861054570483
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed