Section: .. / 0805-advisories /
| /// File Name: |
sa30101.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in the Linux kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/30101/ | | File Size: | 2207 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | 0a024982eafa281913b9748f36567694 |
|
| /// File Name: |
sa30105.txt |
Description:
|
Secunia Security Advisory - Ubuntu has issued an update for thunderbird. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting attacks, or potentially compromise a user's system.
| | Homepage: | http://secunia.com/advisories/30105/ | | File Size: | 17513 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | d2d0972862e6d73880ad922200276c3f |
|
| /// File Name: |
sa30106.txt |
Description:
|
Secunia Security Advisory - Debian has issued an update for kazehakase. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service), disclose potentially sensitive information, and compromise a user's system.
| | Homepage: | http://secunia.com/advisories/30106/ | | File Size: | 4462 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | 788c1a8a8c457a5945afd1dad18c6ceb |
|
| /// File Name: |
sa30108.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in the Linux kernel, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/30108/ | | File Size: | 2029 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | 0e5601e76ad452a576bb861efab5e8f1 |
|
| /// File Name: |
sa30109.txt |
Description:
|
Secunia Security Advisory - Ubuntu has issued an update for emacs. This fixes some security issues, which can be exploited by malicious, local users to perform certain actions with escalated privileges.
| | Homepage: | http://secunia.com/advisories/30109/ | | File Size: | 21899 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | c50cf55e4fbe2abf2de2b8d6a656a706 |
|
| /// File Name: |
sa30110.txt |
Description:
|
Secunia Security Advisory - Red Hat has issued an update for the kernel. This fixes some vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service), disclose potentially sensitive information, or gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/30110/ | | File Size: | 2322 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | 80cabfd1c72564e51760af0deb4a9d90 |
|
| /// File Name: |
sa30112.txt |
Description:
|
Secunia Security Advisory - Red Hat has issued an update for the kernel. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service), and by malicious, local users to cause a DoS, disclose potentially sensitive information, or gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/30112/ | | File Size: | 2400 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | b5a38ae0c0176fdf55e2ce697943f3ac |
|
| /// File Name: |
sa30113.txt |
Description:
|
Secunia Security Advisory - Ubuntu has issued an update for kdelibs. This fixes a vulnerability, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or to potentially gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/30113/ | | File Size: | 11289 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | a907e44da217ee762acc164099711232 |
|
| /// File Name: |
sa30114.txt |
Description:
|
Secunia Security Advisory - HP-UX has issued an update for Netscape Directory Server (NDS). This fixes a vulnerability, which can be exploited by malicious, local users to gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/30114/ | | File Size: | 2177 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | af8dd1f4731ebca518b3773d3ee45243 |
|
| /// File Name: |
sa30116.txt |
Description:
|
Secunia Security Advisory - Red Hat has issued an update for the kernel. This fixes some vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service), disclose potentially sensitive information, or gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/30116/ | | File Size: | 2267 | | Last Modified: | May 7 20:31:38 2008 |
| MD5 Checksum: | 36ed8da85501c3c86fdc6154848b4ac4 |
|
| /// File Name: |
USN-610-1.txt |
Description:
|
Ubuntu Security Notice 610-1 - Christian Herzog discovered that it was possible to connect to any LTSP client's X session over the network. A remote attacker could eavesdrop on X events, read window contents, and record keystrokes, possibly gaining access to private information.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 7189 | | Related CVE(s): | CVE-2008-1293 | | Last Modified: | May 7 13:36:46 2008 |
| MD5 Checksum: | 77ac0e795794d36deede12c886ccdf18 |
|
| /// File Name: |
USN-609-1.txt |
Description:
|
Ubuntu Security Notice 609-1 - It was discovered that arbitrary Java methods were not filtered out when opening databases in OpenOffice.org. If a user were tricked into running a specially crafted query, a remote attacker could execute arbitrary Java with user privileges. Multiple memory overflow flaws were discovered in OpenOffice.org's handling of Quattro Pro, EMF, and OLE files. If a user were tricked into opening a specially crafted document, a remote attacker might be able to execute arbitrary code with user privileges.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 62628 | | Related CVE(s): | CVE-2007-4575, CVE-2007-5745, CVE-2007-5746, CVE-2007-5747, CVE-2008-0320 | | Last Modified: | May 7 13:36:08 2008 |
| MD5 Checksum: | a3deee4ad320e4a22639ce04c53c56e9 |
|
| /// File Name: |
adobe-print-v2.txt |
Description:
|
A design error vulnerability exists in Adobe Reader and Adobe Acrobat Professional. A remote attacker who successfully exploit this vulnerability can control the printer without user's permission. Affected software versions include Adobe Reader 8.1.1 and below and Adobe Acrobat Professional 8.1.1 and below. This is an updated advisory.
| | Author: | cocoruder | | Homepage: | http://ruder.cdut.net/ | | Related File: | adobe-print.txt | | File Size: | 2533 | | Related CVE(s): | CVE-2008-0655 | | Last Modified: | May 7 13:34:32 2008 |
| MD5 Checksum: | b5590bc735cc6ed7a4c5c8923db40f71 |
|
| /// File Name: |
aap-bypass.txt |
Description:
|
Two critical vulnerabilities exist in the javascript API of Adobe Acrobat Professional 7. A remote attacker who successfully exploits these vulnerabilities can execute restricted functions and arbitrary codes on the affected system. Adobe Acrobat Professional version 7.0.9 is affected.
| | Author: | cocoruder | | Homepage: | http://ruder.cdut.net/ | | File Size: | 3586 | | Related CVE(s): | CVE-2008-2042 | | Last Modified: | May 7 13:32:04 2008 |
| MD5 Checksum: | d5e4c5adb0d84a55148b570fa73bccdc |
|
| /// File Name: |
MDVSA-2008-098.txt |
Description:
|
Mandriva Linux Security Advisory - A vulnerability in OpenSSH 4.4 through 4.8 allowed local attackers to bypass intended security restrictions enabling them to execute commands other than those specified by the ForceCommand directive, provided they are able to modify to ~/.ssh/rc.
| | Homepage: | http://www.mandriva.com/security/ | | File Size: | 6090 | | Related CVE(s): | CVE-2008-1657 | | Last Modified: | May 7 13:29:56 2008 |
| MD5 Checksum: | c05d37c906d149b687d05a12d3686dbb |
|
| /// File Name: |
MDVSA-2008-097.txt |
Description:
|
Mandriva Linux Security Advisory - A vulnerability was found in start_kdeinit in KDE 3.5.5 through 3.5.9 where, if it was installed setuid root, it could allow local users to cause a denial of service or possibly execute arbitrary code. By default, start_kdeinit is not installed setuid root on Mandriva Linux, however updated packages have been patched to correct this issue.
| | Homepage: | http://www.mandriva.com/security/ | | File Size: | 4032 | | Related CVE(s): | CVE-2008-1671 | | Last Modified: | May 7 13:29:17 2008 |
| MD5 Checksum: | c4ad65a04bf01fc452431de16f2c99c3 |
|
| /// File Name: |
MDVSA-2008-096.txt |
Description:
|
Mandriva Linux Security Advisory - Steve Grubb found that the vcdiff script in Emacs create temporary files insecurely when used with SCCS. A local user could exploit a race condition to create or overwrite files with the privileges of the user invoking the program.
| | Homepage: | http://www.mandriva.com/security/ | | File Size: | 8840 | | Related CVE(s): | CVE-2008-1694 | | Last Modified: | May 6 19:15:29 2008 |
| MD5 Checksum: | 3a0ea4e3b1b58f64a7459c160c351863 |
|
| /// File Name: |
USN-605-1.txt |
Description:
|
Ubuntu Security Notice 605-1 - Various flaws were discovered in the JavaScript engine. If a user had JavaScript enabled and were tricked into opening a malicious email, an attacker could escalate privileges within Thunderbird, perform cross-site scripting attacks and/or execute arbitrary code with the user's privileges. Several problems were discovered in Thunderbird which could lead to crashes and memory corruption. If a user had JavaScript enabled and were tricked into opening a malicious email, an attacker may be able to execute arbitrary code with the user's privileges.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 18180 | | Related CVE(s): | CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237 | | Last Modified: | May 6 19:12:13 2008 |
| MD5 Checksum: | 0b243038ac4bfd44eec2a7fae256dc22 |
|
| /// File Name: |
USN-608-1.txt |
Description:
|
Ubuntu Security Notice 608-1 - It was discovered that start_kdeinit in KDE 3 did not properly sanitize its input. A local attacker could exploit this to send signals to other processes and cause a denial of service or possibly execute arbitrary code.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 11178 | | Related CVE(s): | CVE-2008-1671 | | Last Modified: | May 6 19:11:14 2008 |
| MD5 Checksum: | d59d8585bfa28ce139cf8e4ff1045cad |
|
| /// File Name: |
USN-607-1.txt |
Description:
|
Ubuntu Security Notice 607-1 - It was discovered that Emacs did not account for precision when formatting integers. If a user were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly other unspecified actions. This issue does not affect Ubuntu 8.04. Steve Grubb discovered that the vcdiff script as included in Emacs created temporary files in an insecure way when used with SCCS. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 23245 | | Related CVE(s): | CVE-2008-1694, CVE-2007-6109 | | Last Modified: | May 6 19:10:40 2008 |
| MD5 Checksum: | a268f077c248e418988b3225432e51aa |
|
| /// File Name: |
AD20080506EN.txt |
Description:
|
The Yahoo! Assistant (3721) ActiveX control is susceptible to a remote code execution vulnerability. Versions 3.6 and below are affected.
| | Author: | Sowhat | | Homepage: | http://www.nevisnetworks.com/ | | File Size: | 2584 | | Last Modified: | May 6 19:09:16 2008 |
| MD5 Checksum: | 93a8a3701807b7809398c4ed10235e20 |
|
| /// File Name: |
SE-2008-03.txt |
Description:
|
PHP versions 5.2.5 and below and 4.4.8 and below suffer from a multibyte shell command escaping bypass vulnerability.
| | Author: | Stefan Esser | | Homepage: | http://www.sektioneins.de/ | | File Size: | 6019 | | Last Modified: | May 6 19:03:07 2008 |
| MD5 Checksum: | 75f252427e7c381d010f1b575b551982 |
|
| /// File Name: |
SE-2008-02.txt |
Description:
|
PHP versions 5.2.5 and below and 4.4.8 and below suffer from a weak random number seed vulnerability in GENERATE_SEED().
| | Author: | Stefan Esser | | Homepage: | http://www.sektioneins.de/ | | File Size: | 6356 | | Last Modified: | May 6 19:02:00 2008 |
| MD5 Checksum: | 4b0cca74264389c41d1fdf9224233459 |
|
| /// File Name: |
sa30034.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for phpmyadmin. This fixes a vulnerability, which can be exploited by malicious users to disclose sensitive information.
| | Homepage: | http://secunia.com/advisories/30034/ | | File Size: | 1923 | | Last Modified: | May 6 18:57:38 2008 |
| MD5 Checksum: | 74081be55865c0c1024b5b21247c75e4 |
|
| /// File Name: |
sa30047.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for horde. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, and by malicious users to disclose sensitive information and potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/30047/ | | File Size: | 2327 | | Last Modified: | May 6 18:57:38 2008 |
| MD5 Checksum: | fc23121bc926911a95a15d02130845ae |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
