Further Information

ESB-2006.0939 -- [Win] -- NOD32 Antivirus DOC Parsing Arbitrary Code Execution Advisory - (21/12/2006)

ESB-2006.0938 -- [Win][UNIX/Linux] -- IBM DB2 Remote DoS during CONNECT processing - (21/12/2006)

AA-2006.0099 -- [Win][Linux][Solaris][AIX] -- Patches available for IBM WebSphere Application Server correcting several vulnerabiltiies - (21/12/2006)

ESB-2006.0937 -- [Win] -- HP Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-072 Through MS06-078 - (21/12/2006)

ESB-2006.0936 -- [HP-UX] -- HP-UX Running OpenSSL Denial of Service (DoS), Increase Privilege - (21/12/2006)

ESB-2006.0935 -- [Win][Linux][Solaris] -- Security Vulnerabilities in the Java Runtime Environment may Allow an Untrusted Applet to Access Data in Other Applets - (21/12/2006)

ESB-2006.0934 -- [Win][Linux][Solaris] -- Security Vulnerabilities Related to Serialization in the Java Runtime Environment may Allow Untrusted Applets to Elevate Privileges - (21/12/2006)

ESB-2006.0933 -- [Win][Linux][Solaris] -- Security Vulnerabilities in the Java Runtime Environment may Allow Untrusted Applets to Elevate Privileges and Execute Arbitrary Code - Two buffer overflow vulnerabilities in the Java Runtime Environment may independently allow an untrusted applet to elevate its privileges. (20/12/2006)

ESB-2006.0932 -- [RedHat] -- Critical: thunderbird security update - (20/12/2006)

ESB-2006.0931 -- [RedHat] -- Critical: seamonkey security update - (20/12/2006)

ESB-2006.0930 -- [RedHat] -- Critical: firefox security update - (20/12/2006)

ESB-2006.0929 -- [RedHat] -- Moderate: tar security update - (20/12/2006)

ESB-2006.0928 -- [OSX] -- Apple Security Update 2006-008 - (20/12/2006)

AL-2006.0127 -- [Win][UNIX/Linux][OSX] -- Mozilla Products Contain Multiple Vulnerabilities - Multiple vulnerabilities have been discovered in various Mozilla products, the most serious of which allow the remote execution of arbitrary code. (20/12/2006)

ESB-2006.0927 -- [Linux] -- McAfee VirusScan: Insecure DT_RPATH - (19/12/2006)

ESB-2006.0926 -- [Win][Linux][FreeBSD] -- BitDefender AV Packed PE File Parsing Engine Heap Overflow - (19/12/2006)

ESB-2006.0925 -- [Win][Netware][UNIX/Linux] -- Vulnerability found in: IBM WebSphere Host On-Demand (HOD) - (19/12/2006)

ESB-2006.0924 -- [Win] -- Multiple Vulnerabilities in Mandiant First Response - (19/12/2006)

AL-2006.0126 -- [Win] -- Increased levels of port 2967 scanning activity - W32.Sagevo worm - Increased activity by a new worm, W32.Sagevo (aka: Big Yellow), which propagates by exploiting a vulnerability in Symantec Client Security and Symantec Anti-virus products. (19/12/2006)

ESB-2006.0889 -- [HP-UX] -- HP-UX Secure Shell Remote Denial of Service - (19/12/2006)

ESB-2006.0923 -- [Win] -- CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities - (18/12/2006)

ESB-2006.0922 -- [Proliant server] -- HP Integrated Lights Out (iLO & iLO 2) Running SSH Key Based Authentication Remote Unauthorized Access - (18/12/2006)

ESB-2006.0921 -- [Win][UNIX/Linux][Debian] -- New sql-ledger packages fix arbitrary code execution - (18/12/2006)

ESB-2006.0920 -- [UNIX/Linux][Debian] -- New clamav packages fix several vulnerabilities - (18/12/2006)

ESB-2006.0919 -- [Linux][Debian] -- New Linux 2.4.27 packages fix several vulnerabilities - (18/12/2006)

ESB-2006.0918 -- [UNIX/Linux][Debian] -- New enemies-of-carlotta package fix missing sanity checks - (18/12/2006)

AL-2006.0125 -- [Win][UNIX/Linux] -- Fake Reserve Bank of Australia email and websites entice users to disclose online banking credentials - AusCERT has received reports of a new fraudulent email, falsely claiming to be from the Reserve Bank of Australia. The email entices users to visit fake online banking websites and contains links to fraudulent ANZ, Commonwealth Bank and Westpac online banking sites. (17/12/2006)

AL-2006.0124 -- [Win][OSX] -- Exploit code released for new unpatched Word vulnerability - Exploit code for a new unpatched Word vulnerability has been released. (15/12/2006)

ESB-2006.0917 -- [UNIX/Linux] -- GNOME Foundation Display Manager gdmchooser Format String Vulnerability - (15/12/2006)

ESB-2006.0916 -- [Win][UNIX/Linux][NetBSD] -- libc glob(3) buffer overflow - (15/12/2006)

ESB-2006.0915 -- [NetBSD] -- Kernel memory leakage in firewire interface - (15/12/2006)

ESB-2006.0914 -- [Win][UNIX/Linux] -- ProFTPD Controls Buffer Overflow - (14/12/2006)

ESB-2006.0913 -- [Win][Netware][UNIX/Linux] -- Sophos Anti-Virus CPIO and SIT Archive Parsing Buffer Overflow Vulnerabilities - (14/12/2006)

ESB-2006.0912 -- [Win][UNIX/Linux] -- Symantec Veritas NetBackup CONNECT_OPTIONS and Long Request Buffer Overflow Vulnerabilities - (14/12/2006)

ESB-2006.0911 -- [Win][UNIX/Linux][Debian] -- New ruby1.6 and 1.8 packages fix denial of service - (14/12/2006)


Previous  1, 2, 3, ... 33, 34, 35  Next denotes AusCERT member only content.