Security Bulletin

RISK: Medium Risk

HP OpenView Network Node Manager Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in HP OpenView Network Node Manager (OV NNM), which could be exploited by remote attackers to compromise a vulnerable system.1. Due to a stack overflow error in the "OvCgi/Toolbar.exe" CGI when processing an overly...

Last Update Date: 28 Jan 2011 Release Date: 25 Mar 2009 4087 Views

RISK: Medium Risk

Sun Java System Identity Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun Java System Identity Manager, which could be exploited by attackers to bypass certain security restrictions, disclose sensitive information, conduct cross-site scripting attacks, or potentially compromise a vulnerable system.1. An unspecified error can lead to...

Last Update Date: 28 Jan 2011 Release Date: 23 Mar 2009 4011 Views

RISK: Medium Risk

Adobe Acrobat and Reader JavaScript Method Code Execution Vulnerability

A vulnerability has been identified in Adobe Reader and Acrobat, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by an error whithin the processing of an unspecified JavaScript method, which could allow attackers to cause a vulnerable application to crash...

Last Update Date: 28 Jan 2011 Release Date: 20 Mar 2009 4005 Views

RISK: Medium Risk

Lotus Notes File Viewer "wp6sr.dll" Buffer Overflow Vulnerability

A vulnerability has been identified in IBM Lotus Notes, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error in the File Viewer for WordPerfect module when processing a specially crafted file attachment, which could be exploited...

Last Update Date: 28 Jan 2011 Release Date: 19 Mar 2009 4061 Views

RISK: Medium Risk

Sun Solaris Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Sun Solaris, which could be exploited by attackers to compromise a vulnerable system. These issues are caused by errors in Flash.

Last Update Date: 28 Jan 2011 Release Date: 18 Mar 2009 4030 Views

RISK: Medium Risk

Symantec Products KeyView Module Buffer Overflow Vulnerability

A vulnerability has been identified in various Symantec products, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error in the Autonomy KeyView module, which could be exploited by attackers to crash an affected server or application...

Last Update Date: 28 Jan 2011 Release Date: 18 Mar 2009 3983 Views

RISK: Medium Risk

Adobe Reader/Acrobat Remote Code Execution Vulnerability

A critical vulnerability has been identified in Adobe Reader 9 and Acrobat 9 and earlier versions. This vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system.

Last Update Date: 28 Jan 2011 Release Date: 12 Mar 2009 4008 Views

RISK: Medium Risk

HP-UXJava Code Execution and Security Bypass Vulnerabilities

Multiple vulnerabilities have been identified in HP-UX, which could be exploited by attackers or malicious users to bypass security restrictions, disclose sensitive information, cause a denial of service, or take complete control of an affected system. These issues are caused by errors in...

Last Update Date: 28 Jan 2011 Release Date: 12 Mar 2009 3981 Views

RISK: Medium Risk

Microsoft Windows SChannel Could Allow Spoofing Vulnerability ( 11 March 2009 )

A spoofing vulnerability exists in the Microsoft Windows SChannel authentication component when using certificate based authentication. An attacker who successfully exploited this vulnerability would be able to authenticate to a server using only an authorized user¡¦s digital certificate and without the associated private key.

Last Update Date: 28 Jan 2011 Release Date: 11 Mar 2009 3782 Views

RISK: Medium Risk

Microsoft Windows DNS and WINS Server Could Allow Spoofing Vulnerabilities ( 11 March 2009 )

1. DNS Server Query Validation VulnerabilityA spoofing vulnerability exists in Windows DNS server. This vulnerability could allow a remote unauthenticated attacker to quickly and reliably spoof responses and insert records into the DNS server's cache, thereby redirecting Internet traffic.2. DNS Server Response...

Last Update Date: 28 Jan 2011 Release Date: 11 Mar 2009 3885 Views