Zero Day Initiative Advisory 10-291 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Endpoint Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within the portion of the server that generates reports. Due to the combination of insufficient checks being performed on the application and failure to authenticate a user for generating a chart, an attacker can overwrite arbitrary files on a server. Careful exploitation can lead to code execution under the context of the php interpreter.
00916da4001ed315f468080d322bf53cff8f654bb961279e9066d04487ac97b0HP Security Bulletin HPSBMA02616 SSRT100231 - A potential security vulnerability has been identified with HP Insight Management Agents running on Linux and Windows. The vulnerability could be exploited remotely resulting in full path disclosure. Revision 1 of this advisory.
637543a681f83a802f4379e7b0086b7d4df4342c43fe300efaa5423e6e23e1a0HP Security Bulletin HPSBMA02615 SSRT100228 - A potential security vulnerability has been identified with HP Insight Diagnostics Online Edition running on Linux and Windows. The vulnerability could be exploited remotely resulting in cross site scripting (XSS). Revision 1 of this advisory.
a9ee760a3ea2e10f3bbe649a6c244c7ecfd52294b6b83e7c5c0a5be62c6f55c4HP Security Bulletin HPSBOV02618 SSRT100354 - A potential security vulnerability has been identified with HP OpenVMS Integrity Servers. The vulnerability could be locally exploited to create a Denial of Service (DoS) or to gain privileged access to system resources. Revision 1 of this advisory.
05862d7d61e8a73019a1c61479b2dfcc61692f5e1dd1c493f3f042072ae92f69Mandriva Linux Security Advisory 2010-255 - Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument. The updated packages have been upgraded to php-intl-1.1.2 and patched to correct this issue.
edc34bdf1e37b1b74c1522707bbedfbc6f011dc71937ac68a416c0d7ded14024Mandriva Linux Security Advisory 2010-254 - This is a maintenance and security update that upgrades php to 5.3.4 for 2010.0/2010.1. Paths with NULL in them are now considered as invalid. Other fixes were also added.
f73228b7526719b17858daba587571787c621c8e2bd9a419e23f3e9ae7dc7bcc
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed