Further Information

AA-2006.0015 -- [QNX] -- QNX Neutrino RTOS multiple vulnerabilities allow local root compromise - The QNX Neutrino Realtime Operating System includes nine vulnerable programs that allow a local user to esaclate privileges to root. In addition, there is a local denial of service vulnerability. (09/02/2006)

AA-2006.0014 -- [Linux] -- Linux kernel vulnerable to malformed ICMP remote denial of service - (09/02/2006)

ESB-2006.0107 -- [Win][UNIX/Linux] -- Privilege escalation vulnerability in Java Web Start - A vulnerability in Java Web Start may allow an untrusted application to elevate its privileges. (09/02/2006)

ESB-2006.0106 -- [Win][UNIX/Linux] -- Security Vulnerabilities in the Sun Java Runtime Environment may Allow an Untrusted Applet to Elevate its Privileges - When a user visits a webpage hosting a malicious Java applet, a remote attacker may execute arbitrary code on the user's computer. (09/02/2006)

ESB-2006.0105 -- [UNIX/Linux] -- Heimdal Kerberos 0.7.2 and 0.6.6 released fixing vulnerabilities in rshd and telnetd - (08/02/2006)

AA-2006.0013 -- [Win] -- Incorrect ACLs on Windows services allow privilege escalation - Windows XP prior to Service Pack 2 provides incorrect access controls on four Windows services. (08/02/2006)

AA-2006.0012 -- [Win] -- Additional WMF vulnerability in Internet Explorer versions 5.5 and 5.01 - Fully patched Internet Explorer 5.5 and 5.01 are vulnerable to another WMF file handling vulnerability, different from the previous issues addressed in MS06-001 and MS05-053. Outlook Express is also affected. (08/02/2006)

AA-2006.0011 -- [Win] -- AutoCAD and other Autodesk products remote unauthorized access vulnerability - Multiple Autodesk products contain a vulnerability allowing unauthorized access to the affected computer. (07/02/2006)

AA-2006.0010 -- [Win][UNIX/Linux] -- Computer Associates multiple products message queuing CAM/CAFT denial of service - Two vulnerabilities in the Message Queuing (CAM/CAFT) component used in multiple CA products allow a remote attacker to cause a denial of service. (07/02/2006)

AA-2006.0009 -- [Win][OSX] -- Adobe Photoshop and Illustrator file permissions vulnerability on multi-user systems - (07/02/2006)

ESB-2006.0104 -- [Linux][Debian] -- New ipsec-tools packages fix denial of service - (07/02/2006)

AA-2006.0008 -- [Win][Linux][Solaris][AIX] -- IBM Tivoli Access Manager Plug-in for Web Servers allows inappropriate access - (06/02/2006)

AA-2006.0007 -- [Win] -- Backup Exec for Windows Servers installs vulnerable versions of Microsoft components - Installing Backup Exec for Windows Servers or the Backup Exec Desktop and Laptop Option may install older vulnerable versions of Microsoft database components (MSDE and MDAC). (06/02/2006)

AL-2006.0012 -- [Win] -- Symantec Sygate Management Server: SMS Authentication Servlet SQL Injection - A SQL injection vulnerability in Symantec's Sygate Management Server (SMS) potentially allows a remote attacker to gain administrative privileges to the server. (06/02/2006)

ESB-2006.0103 -- [RedHat] -- Critical: mozilla security update - (03/02/2006)

ESB-2006.0102 -- [Win][UNIX/Linux][RedHat] -- Critical: firefox security update - (03/02/2006)

ESB-2006.0100 -- [UNIX/Linux][Debian] -- New mydns packages fix denial of service - (03/02/2006)

ESB-2006.0099 -- [RedHat] -- Moderate: gd security update - (02/02/2006)

ESB-2006.0098 -- [RedHat] -- Important: kernel security update (IA-32) - (02/02/2006)

ESB-2006.0097 -- [RedHat] -- Important: kernel security update (IA-64) - (02/02/2006)

ESB-2006.0096 -- [UNIX/Linux][Debian] -- New pdftohtml packages fix arbitrary code execution - (02/02/2006)

ESB-2006.0095 -- [UNIX/Linux][Debian] -- New pdfkit.framework packages fix arbitrary code execution - (02/02/2006)

ESB-2006.0094 -- [Win][UNIX/Linux] -- OpenSSH 4.3 released - (02/02/2006)

ESB-2006.0093 -- [FreeBSD] -- Infinite loop in SACK handling - (02/02/2006)

ESB-2006.0092 -- [Solaris] -- Security Vulnerability in x64 Kernel Processing may Cause a System Panic - (02/02/2006)

AU-2006.0006 -- AusCERT Update - [Win] - "Blackmal" email worm update (CME-24) - This AusCERT update provides a summary of known information about the "Blackmal" email worm reported in AL-2006.0005 (02/02/2006)

AL-2006.0010 -- [Win] -- Internet Explorer may incorrectly allow ActiveX controls to load with "kill bit" set - (01/02/2006)

ESB-2006.0090 -- [Win][Linux][HP-UX][Solaris][AIX] -- Multiple patches for WebSphere Application Server and Tivoli Identity Manager - (01/02/2006)

ESB-2006.0085 -- [Win][UNIX/Linux][Debian] -- New ImageMagick packages fix arbitrary command execution - (01/02/2006)

ESB-2006.0089 -- [Win][UNIX/Linux][Debian] -- New unalz packages fix arbitrary code execution - (31/01/2006)

ESB-2006.0088 -- [Win][UNIX/Linux][Debian] -- New trac packages fix SQL injection and cross-site scripting - (31/01/2006)

AL-2006.0009 -- [Win] -- Vulnerability in Winamp 5.12 and prior allows arbitrary code execution - A vulnerability exists in Winamp 5.12 and prior which allows an attacker to run arbitrary code using a specially crafted playlist (.pls) file. (31/01/2006)

AA-2006.0006 -- [Win][UNIX/Linux] -- Workaround for undisclosed, unpatched Oracle PLSQL Gateway vulnerability - David Litchfield from NGS Software has advised of a workaround for an unpatched and undisclosed vulnerability in Oracle PLSQL Gateway. (30/01/2006)

ESB-2006.0087 -- [FreeBSD] -- IP fragment handling panic in pf(4) - (30/01/2006)

ESB-2006.0086 -- [Win][UNIX/Linux][Debian] -- New drupal packages fix several vulnerabilities - (30/01/2006)


Previous  1, 2, 3 ... 31, 32, 33, 34, 35  Next denotes AusCERT member only content.