Security Bulletin

RISK: Medium Risk

Sun Java System Active Server Pages Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun Java System Active Server Pages, which can be exploited by malicious users to compromise a vulnerable system, and by malicious people to disclose sensitive information, manipulate certain data, bypass certain security restrictions, or to compromise a vulnerable system...

Last Update Date: 28 Jan 2011 Release Date: 5 Jun 2008 5188 Views

RISK: Medium Risk

CA Secure Content Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in CA Secure Content Manager (CA eTrust Secure Content Manager), which could be exploited by attackers to cause a denial of service or compromise an affected system. These issues are caused by unspecified input validation and buffer overflow errors when processing certain...

Last Update Date: 28 Jan 2011 Release Date: 5 Jun 2008 5236 Views

RISK: Medium Risk

HP Instant Support ActiveX Control Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP Instant Support, which could be exploited by remote attackers to manipulate data or take complete control of an affected system.1. Due to buffer overflow errors in the "HPISDataManager.dll" ActiveX control when processing malformed data passed...

Last Update Date: 28 Jan 2011 Release Date: 5 Jun 2008 5173 Views

RISK: Medium Risk

Apple Safari for Windows Remote Code Execution Vulnerability

A vulnerability has been identified in Apple Safari for Windows, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by errors within the combination of the default download location in Safari and how the Windows desktop handles executables...

Last Update Date: 28 Jan 2011 Release Date: 3 Jun 2008 5154 Views

RISK: Medium Risk

CiscoWorks Common Services Remote Code Execution Vulnerability

A vulnerability has been identified in CiscoWorks Common Services, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an unspecified error when processing user-supplied data, which could allow a remote attacker to execute arbitrary code on the...

Last Update Date: 28 Jan 2011 Release Date: 30 May 2008 5369 Views

RISK: Medium Risk

Apple Mac OS XMultiple Vulnerabilities

Multiple vulnerabilities have been identified in Apple Mac OS X, which could be exploited by remote or local attackers to cause a denial of service, disclose sensitive information, bypass security restrictions or compromise an affected system. These issues are caused by implementation, data validation, ...

Last Update Date: 28 Jan 2011 Release Date: 30 May 2008 5195 Views

RISK: Medium Risk

Samba "receive_smb_raw()" Remote Buffer Overflow Vulnerability

A vulnerability has been identified in Samba, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a buffer overflow error in the "receive_smb_raw()" [lib/util_sock.c] function when processing...

Last Update Date: 28 Jan 2011 Release Date: 29 May 2008 5205 Views

RISK: Medium Risk

Adobe Flash Player Unspecified Remote Code Execution Vulnerability

A vulnerability has been identified in Adobe Flash Player, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by an unspecified memory corruption error when processing a malformed SWF file, which could be exploited by attackers to...

Last Update Date: 28 Jan 2011 Release Date: 28 May 2008 5163 Views

RISK: Medium Risk

FileZilla GnuTLS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in FileZilla, which could be exploited by remote attackers to cause a denial of service or compromise an affected system.1. Due to a NULL pointer dereference error when processing TLS packets containing multiple "Client Hello" messages, which could...

Last Update Date: 28 Jan 2011 Release Date: 22 May 2008 5276 Views

RISK: Medium Risk

CA Products Code Execution and File Manipulation Vulnerabilities

Multiple vulnerabilities have been identified in various CA products, which could be exploited by remote attackers to take complete control of an affected system.1. Due to insufficient path verification by the logging service (caloggerd), which could allow a remote attacker to append data to...

Last Update Date: 28 Jan 2011 Release Date: 21 May 2008 5186 Views