Further Information

ESB-2005.0957 -- HP Security Bulletin -- SSRT4787 Revised - HP Systems Insight Manager (SIM) for HP-UX Remote Denial of Service (DoS) - (02/12/2005)

ESB-2005.0956 -- Debian Security Advisory DSA 914-1 -- New horde2 packages fix cross-site scripting - (02/12/2005)

ESB-2005.0721 -- Sun Alert Notification 101926 -- Security Vulnerability in the Xsun(1) and Xorg Servers - (02/12/2005)

ESB-2005.0955 -- Debian Security Advisory DSA 913-1 -- New gdk-pixbuf packages fix several vulnerabilities - (01/12/2005)

ESB-2005.0954 -- Sun Alert Notification 101974 -- OpenSSL May Allow an Agent to Force a Rollback to a Cryptographically Weak Protocol - (01/12/2005)

ESB-2005.0953 -- Debian Security Advisory DSA 912-1 -- New centericq packages fix denial of service - (01/12/2005)

ESB-2005.0952 -- Sun Alert Notification 102016 -- The Solaris Management Console (SMC) Enables TRACE HTTP by Default - (30/11/2005)

ESB-2005.0951 -- Sun Alert Notification 102017 -- Security Vulnerability With Java Management Extensions in the Java Runtime Environment may Allow Untrusted Applet to Elevate Privileges - (30/11/2005)

ESB-2005.0950 -- Sun Alert Notification 102054 -- Security Vulnerability in Symantec/VERITAS NetBackup - (30/11/2005)

ESB-2005.0949 -- APPLE-SA-2005-11-29 -- Security Update 2005-009 - (30/11/2005)

ESB-2005.0948 -- Debian Security Advisory DSA 911-1 -- New gtk+2.0 packages fix several vulnerabilities - (30/11/2005)

ESB-2005.0947 -- Cisco Security Advisory -- Cisco Security Agent Vulnerable to Privilege Escalation - A vulnerability exists in CSA agents that can allow a privilege escalation through locally executed software, providing a normal user or attacker with local system level privileges on a Windows workstation or server running managed or standalone CSA 4.5.0 or 4.5.1 agents. (30/11/2005)

AA-2005.0031 -- PHP 5.1.1 released fixing multiple vulnerabilities - PHP 5.1.0 and prior contain multiple vulnerabilities which may allow execution of arbitrary code, denial of service or information disclosure. (28/11/2005)

ESB-2005.0946 -- Sun Alert Notification 102060 -- Security Vulnerabilities in the traceroute(1M) Utility may Allow Elevated Privileges - (25/11/2005)

ESB-2005.0945 -- Sun Alert Notification 102041 -- Security Vulnerability in the libexif JPEG Image Processing Library - (25/11/2005)

ESB-2005.0944 -- Debian Security Advisory DSA 910-1 -- New zope2.7 packages fix arbitrary file inclusion - (24/11/2005)

AA-2005.0030 -- Novell ZENworks -- Access control vulnerability allows regular users access to Remote Diagnostics - (24/11/2005)

ESB-2005.0943 -- OTRS Security Advisory 2005-01 -- Vulnerabilities in OTRS core / SQL-Injection and Cross-Site-Scripting - (24/11/2005)

AA-2005.0029 -- Increased activity of Sober email worm variant including faked FBI and CIA emails - A variant of the Sober email worm is currently spreading rapidly through English and German language emails. The emails may be spoofed to appear to be a warning email from the FBI or CIA. (24/11/2005)

ESB-2005.0942 -- Debian Security Advisory DSA 909-1 -- New horde3 packages fix cross-site scripting - (24/11/2005)

ESB-2005.0941 -- Horde 3.0.7 release fixes multiple cross-site scripting vulnerabilities - (24/11/2005)

AU-2005.0020 -- Sun Alert Notification 102002 - Vulnerability in Sun ONE/Java System Directory Server and Directory Proxy Server HTTP Administrative Interface - This update provides further information from Sun on the vulnerability reported last month in AusCERT Alert AL-2005.0031. (24/11/2005)

ESB-2005.0939 -- Debian Security Advisory DSA 908-1 -- New sylpheed-claws packages fix arbitrary code execution - (23/11/2005)

ESB-2005.0938 -- Debian Security Advisory DSA 907-1 -- New ipmenu packages fix insecure temporary file creation - (23/11/2005)

AA-2005.0027 -- Linux IPsec-Tools 0.6.2 and prior -- denial of service vulnerability - (23/11/2005)

ESB-2005.0936 -- Debian Security Advisory DSA 906-1 -- New sylpheed packages fix arbitrary code execution - (23/11/2005)

ESB-2005.0935 -- Cisco Security Response -- Cisco PIX TCP Connection Prevention - (23/11/2005)

AA-2005.0028 -- Mambo 4.5.2.3 and prior -- Remote file inclusion vulnerability allows execution of arbitrary code - AusCERT advises that an exploit for this vulnerability is publicly available and widespread exploitation of vulnerable web servers has been reported. (23/11/2005)

ESB-2005.0937 -- SYM05-025 -- Symantec Dynamic VPN Services: ISAKMP Denial of Service - A buffer overflow in ISAKMP processing on multiple Symantec VPN products can lead to a denial of service. (23/11/2005)

AA-2005.0026 -- Opera 8.51 release fixes two vulnerabilities - (23/11/2005)

ESB-2005.0934 -- Debian Security Advisory DSA 905-1 -- New mantis packages fix several vulnerabilities - (22/11/2005)

ESB-2005.0933 -- Debian Security Advisory DSA 904-1 -- New netpbm packages fix arbitrary code execution - (22/11/2005)

ESB-2005.0931 -- Debian Security Advisory DSA 902-1 -- New xmail packages fix arbitrary code execution - (22/11/2005)

ESB-2005.0929 -- Debian Security Advisory DSA 900-1 -- New fetchmail packages fix potential information leak - (22/11/2005)

ESB-2005.0712 -- Debian Security Advisory DSA 811-1 -- New common-lisp-controller packages fix arbitrary code injection - (22/11/2005)


Previous  1, 2, 3, 4 ... 30, 31, 32  Next denotes AusCERT member only content.