Further Information

ESB-2005.0995 -- [Solaris] -- Sun Fire T2000 Server requires mandatory patches - (28/10/2007)

ESB-2005.0409 -- HP Security Bulletin HPSBUX01137 -- SSRT5954 rev.11 - HP-UX TCP/IP Remote Denial of Service (DoS) - (09/10/2007)

ESB-2007.0994 -- [HP-UX] -- SSRT4728 - HP-UX running TCP/IP Remote Denial of Service (DoS) - (30/05/2007)

ESB-2005.0997 -- [HP-UX] -- SSRT051026 rev. 2 - HP-UX running WBEM Services Denial of Service (DoS) - (20/11/2006)

ESB-2005.0477 -- Sun Alert Notification 101783 -- Security Vulnerability in Samba's "ms_fnmatch()" Function May Result in a Denial of Service (DoS) - (19/10/2006)

ESB-2005.0106 -- Sun Alert Notification 57730 -- Security Vulnerability in Samba(7) Versions Prior to 3.0.10 May Allow Unauthorized Root Privileges - (19/10/2006)

ESB-2005.0826 -- [Solaris] -- Multiple Security Vulnerabilities in Mozilla - (16/06/2006)

ESB-2005.0940 -- [HP-UX] -- SSRT051074 Revised - HP-UX Running xterm Local Unauthorized Access - (28/04/2006)

ESB-2005.0988 -- [Linux][Debian] -- New Linux 2.4.27 packages fix several vulnerabilities - (24/03/2006)

ESB-2005.0932 -- [Debian] -- New unzip packages fix unauthorised permissions modification - (13/01/2006)

ESB-2005.1011 -- [UNIX/Linux][Debian] -- New tkdiff packages fix insecure temporary file creation - (30/12/2005)

AU-2005.0023 -- AusCERT Update - [Win] - Partial workarounds available for WMF file handling vulnerability - Microsoft Security Advisory 912840 has been released confirming the WMF file handling vulnerability reported in AL-2005.0043. Partial workarounds can be used to mitigate the risk to some extent and these are described below. (30/12/2005)

AL-2005.0043 -- [Win] -- Unpatched flaw in WMF image file handling exploited in wild - An unpatched vulnerability exists in Windows allowing a remote attacker to execute arbitrary code if a user opens a specially crafted WMF image file or visits a web site containing such an image. (29/12/2005)

ESB-2005.1013 -- [Win][Linux] -- VMware NAT Service vulnerable to buffer overflow via FTP PORT/EPRT commands - (28/12/2005)

ESB-2005.1012 -- [UNIX/Linux][Debian] -- New dhis-tools-dns packages fix insecure temporary file creation - (28/12/2005)

ESB-2005.1010 -- [Solaris] -- Security Vulnerability in PC Netlink 2.0 slsadmin and slsmgr May Allow Files to be Opened Insecurely - (28/12/2005)

ESB-2005.1009 -- [Win] -- McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite - (23/12/2005)

AA-2005.0034 -- [Win][OSX] -- Vulnerabilities in Apple QuickTime and Apple iTunes - Vulnerabilities have been discovered in Apple QuickTime and Apple iTunes that may allow a remote attacker to cause a denial of service or execute arbitrary code on a victim's machine. (23/12/2005)

ESB-2005.1008 -- [RedHat] -- Moderate: curl security update - (23/12/2005)

ESB-2005.1007 -- [Win][UNIX/Linux][Debian] -- New phpbb2 packages fix several vulnerabilities - (23/12/2005)

ESB-2005.1006 -- [Win][UNIX/Linux][RedHat] -- Moderate: perl security update - (22/12/2005)

ESB-2005.1005 -- [Win][UNIX/Linux][RedHat] -- Moderate: perl security update - (22/12/2005)

ESB-2005.1004 -- [UNIX/Linux][Debian] -- New nbd packages fix potential arbitrary code execution - (22/12/2005)

AA-2005.0033 -- [Win] -- Buffer overflow in Symantec AntiVirus products - Vulnerable RAR processing in many Symantec antivirus applications may allow a remote attacker to execute arbitrary code. (21/12/2005)

ESB-2005.1003 -- [UNIX/Linux][RedHat] -- Important: xpdf security update - (21/12/2005)

ESB-2005.1002 -- [UNIX/Linux][RedHat] -- Important: cups security update - (21/12/2005)

ESB-2005.1001 -- [UNIX/Linux][RedHat] -- Important: kdegraphics security update - (21/12/2005)

ESB-2005.1000 -- [UNIX/Linux][RedHat] -- Important: gpdf security update - (21/12/2005)

ESB-2005.0999 -- [UNIX/Linux][RedHat] -- Important: udev security update - (21/12/2005)

ESB-2005.0998 -- [RedHat] -- Moderate: netpbm security update - (21/12/2005)

ESB-2005.0996 -- [UNIX/Linux][Debian] -- New dropbear packages fix arbitrary code execution - (20/12/2005)

ESB-2005.0993 -- [Juniper] -- Optimistic TCP acknowledgements can cause denial of service - (19/12/2005)

ESB-2005.0992 -- [Win][UNIX/Linux] -- Multiple vulnerabilities in Adobe (Macromedia) products - (16/12/2005)

ESB-2005.0991 -- [AIX] -- Buffer overflow vulnerability in slocal - (16/12/2005)

ESB-2005.0990 -- [AIX] -- A user in the system group with RunDiagnostics role can execute arbitrary code - (16/12/2005)


1, 2, 3 ... 30, 31, 32  Next denotes AusCERT member only content.