[Full-disclosure] [Positive Technologies SA 2008-05] VMware Multiple Products vmci.sys Privilege Escalation Vulnerability

2009-04-06 Thread Valery Marchuk
-- (PT-2008-05) Positive Technologies Security Advisory VMware Multiple Products vmci.sys Privilege Escalation Vulnerability -- ---[ Affected Software

[Full-disclosure] [Positive Technologies SA 2008-07] VMware Multiple Products hcmon.sys Denial of Service Vulnerability

2009-04-06 Thread Valery Marchuk
-- (PT-2008-07) Positive Technologies Security Advisory VMware Multiple Products hcmon.sys Denial of Service Vulnerability -- ---[ Affected Software ]

[Full-disclosure] [SECURITY] [DSA 1763-1] New openssl packages fix denial of service

2009-04-06 Thread Moritz Muehlenhoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-1763-1 secur...@debian.org http://www.debian.org/security/ Moritz Muehlenhoff April 06, 2009

[Full-disclosure] [ GLSA 200904-06 ] Eye of GNOME: Untrusted search path

2009-04-06 Thread Pierre-Yves Rofes
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200904-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - -

[Full-disclosure] ZDI-09-016: Novell Client/NetIdentity Agent Remote Arbitrary Pointer Dereference Code Execution Vulnerability

2009-04-06 Thread ZDI Disclosures
ZDI-09-016: Novell Client/NetIdentity Agent Remote Arbitrary Pointer Dereference Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-016 April 6, 2009 -- Affected Vendors: Novell -- Affected Products: Novell Netware -- Vulnerability Details: This vulnerability allows

[Full-disclosure] TPTI-09-01: VMWare VMnc Codec Invalid RFB Message Type Heap Overflow

2009-04-06 Thread dvlabs
TPTI-09-01: VMWare VMnc Codec Invalid RFB Message Type Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-09-01 April 6, 2009 -- CVE ID: CVE-2009-0909 -- Affected Vendors: VMWare, Inc. -- Affected Products: VMWare, Inc. VMWare Player VMWare, Inc. VMWare Workstation VMWare,

[Full-disclosure] TPTI-09-02: VMWare VMnc Codec Open-DML Standard Index dwSize Heap Overflow

2009-04-06 Thread dvlabs
TPTI-09-02: VMWare VMnc Codec Open-DML Standard Index dwSize Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-09-02 April 6, 2009 -- CVE ID: CVE-2009-0910 -- Affected Vendors: VMWare, Inc. -- Affected Products: VMWare, Inc. VMWare Server VMWare, Inc. VMWare ACE VMWare,