Further Information

ESB-2013.0238 - [Win][UNIX/Linux] Drupal: Denial of service - Remote/unauthenticated - (21/02/2013)

ASB-2013.0024.2 - UPDATE [Win][UNIX/Linux][Android] Mozilla Firefox, Thunderbird and SeaMonkey: Multiple vulnerabilities - (21/02/2013)

ASB-2013.0025 - ALERT [Win][UNIX/Linux] Oracle Java: Multiple vulnerabilities - A number of vulnerabilities have been identified in Oracle Java JDK and JRE 7 Update 13 and earlier, JDK and JRE 6 Update 39 and earlier, JDK and JRE 5.0 Update 39 and earlier, and SDK and JRE 1.4.2_41 and earlier. (20/02/2013)

ESB-2013.0227 - [Win][UNIX/Linux][RedHat] jakarta-commons-httpclient: Provide misleading information - Remote with user interaction - (20/02/2013)

ESB-2013.0226 - [Win][UNIX/Linux][RedHat] axis: Provide misleading information - Remote with user interaction - (20/02/2013)

ESB-2013.0219 - [UNIX/Linux][Debian] nss-pam-ldapd: Execute arbitrary code/commands - Remote/unauthenticated - (19/02/2013)

ESB-2013.0214 - [Win][UNIX/Linux][Debian] ffmpeg: Execute arbitrary code/commands - Remote with user interaction - (18/02/2013)

ESB-2013.0210 - [Win][UNIX/Linux] IBM WebSphere Message Broker: Multiple vulnerabilities - (15/02/2013)

ESB-2013.0208 - [Win][UNIX/Linux][Debian] openconnect: Execute arbitrary code/commands - Remote/unauthenticated - (15/02/2013)

ESB-2013.0204 - [Win][UNIX/Linux] polarssl: Multiple vulnerabilities - (14/02/2013)

ESB-2013.0197 - [Win][UNIX/Linux][Debian] Ruby on Rails: Multiple vulnerabilities - (13/02/2013)

ESB-2013.0183 - [Win][UNIX/Linux] OpenSSL: Access confidential data - Remote/unauthenticated - (12/02/2013)

ASB-2013.0020 - [Win][UNIX/Linux] PostgreSQL: Denial of service - Existing account - A vulnerability has been identified in PostgreSQL prior to versions 9.2.3, 9.1.8, 9.0.12, 8.4.16 and 8.3.23. (11/02/2013)

ASB-2013.0019 - [UNIX/Linux] Puppet: Multiple vulnerabilities - Multiple vulnerabilities have been identified in Puppet Enterprise prior to version 2.7.1. (11/02/2013)

ASB-2013.0017 - [Win][UNIX/Linux] Ruby: Cross-site scripting - Remote with user interaction - A vulnerability has been identified in Ruby prior to versions 1.9.3p385, 2.0.0 rc2 or trunk revision 39102. (08/02/2013)

ASB-2013.0016 - [Win][UNIX/Linux] GnuTLS: Access privileged data - Remote with user interaction - A vulnerability has been identified in GnuTLS prior to versions 3.1.7, 3.0.28 and 2.12.23. (08/02/2013)

ESB-2013.0170 - [Win][UNIX/Linux][Mobile] libcurl: Execute arbitrary code/commands - Remote with user interaction - (08/02/2013)

ESB-2013.0169 - [Win][UNIX/Linux] IBM Netezza WebAdmin: Multiple vulnerabilities - (08/02/2013)

ESB-2013.0168 - [UNIX/Linux][Debian] ircd-hybrid: Denial of service - Remote/unauthenticated - (08/02/2013)

ESB-2013.0166 - [UNIX/Linux][RedHat] xen: Denial of service - Existing account - (08/02/2013)

ESB-2013.0162 - [Win][UNIX/Linux] libssh: Denial of service - Remote/unauthenticated - (06/02/2013)

ESB-2013.0161 - [Win][UNIX/Linux] OpenSSL: Multiple vulnerabilities - (06/02/2013)

ASB-2013.0014 - [Win][UNIX/Linux] Joomla!: Access confidential data - Remote/unauthenticated - A number of vulnerabilities have been identified in Joomla! prior to versions 3.0.3 and 2.5.9. (06/02/2013)

ESB-2013.0156 - [Win][UNIX/Linux] IBM WebSphere MQ: Multiple vulnerabilities - (05/02/2013)

ASB-2013.0013 - ALERT [Win][UNIX/Linux] Oracle Java : Multiple vulnerabilities - Oracle has stated that while this patch was originally scheduled for release on February 19th, the release was accelerated due to active exploitation of one of these vulnerabilities. (04/02/2013)

ESB-2013.0137 - [UNIX/Linux][RedHat] xorg-x11-drv-qxl: Denial of service - Existing account - (01/02/2013)

ESB-2013.0135 - [Win][UNIX/Linux][RedHat] freetype: Execute arbitrary code/commands - Remote with user interaction - (01/02/2013)

ESB-2013.0133 - [Win][UNIX/Linux][RedHat] nss, nss-util and nspr: Multiple vulnerabilities - (01/02/2013)

ESB-2013.0131 - [Win][UNIX/Linux][Mobile] VLC media player: Execute arbitrary code/commands - Remote with user interaction - (31/01/2013)

ESB-2013.0130 - [UNIX/Linux] Samba Web Administration Tool: Multiple vulnerabilities - (31/01/2013)

ESB-2013.0127 - [Win][UNIX/Linux][RedHat] openstack-glance: Administrator compromise - Existing account - (31/01/2013)

ESB-2013.0126 - [Win][UNIX/Linux][RedHat] openstack-nova: Multiple vulnerabilities - (31/01/2013)

ESB-2013.0124 - [Win][UNIX/Linux][Debian] rails: Execute arbitrary code/commands - Remote/unauthenticated - (31/01/2013)

ASB-2013.0012 - [Win][UNIX/Linux] Wireshark: Denial of service - Remote with user interaction - A number of vulnerabilities have been identified in Wireshark prior to versions 1.8.5 and 1.6.13. (30/01/2013)

ESB-2013.0115 - [Win][UNIX/Linux][RedHat] rubygem-activesupport: Execute arbitrary code/commands - Remote/unauthenticated - (29/01/2013)


Previous  1, 2, 3, 4, 5, 6  Next denotes AusCERT member only content.