Edgeos - New Vulnerabilities

Edgeos - Private-Labeled Vulnerability Assessment Services

Solaris 10 (i386) : 128307-04 - (Found June 29, 2008 )

Critical Risk -- The remote host is missing Sun Security Patch number 128307-04(SunOS 5.10_x86: devfs patch).Date this patch was last updated by Sun : Tue May 20 08:28:03 MDT 2008You should install this patch for your system to be up-to-date.
http://www.edgeos.com/threats/32498

Solaris 10 (i386) : 126134-04 - (Found June 29, 2008 )

Critical Risk -- The remote host is missing Sun Security Patch number 126134-04(SunOS 5.10_x86: sshd patch).Date this patch was last updated by Sun : Fri Jun 13 08:38:19 MDT 2008You should install this patch for your system to be up-to-date.
http://www.edgeos.com/threats/32497

Solaris 10 (sparc) : 137019-02 - (Found June 29, 2008 )

Critical Risk -- The remote host is missing Sun Security Patch number 137019-02(SunOS 5.10: snmpXdmid patch).Date this patch was last updated by Sun : Wed Jun 11 10:49:44 MDT 2008You should install this patch for your system to be up-to-date.
http://www.edgeos.com/threats/32496

AIX 610000 : U807556 - (Found June 29, 2008 )

Critical Risk -- The remote host is missing AIX PTF U807556 which is relatedto the security of the package bos.mp64You should install this PTF for your system to be up-to-date.
http://www.edgeos.com/threats/32509

Xerox DocuShare dsweb Servlet Cross-Site Scripting Vulnerability - (Found June 29, 2008 )

High Risk -- The remote host is running DocuShare, a web-based document managementapplication from Xerox. The version of DocuShare installed on the remote host fails tosanitize user input to the 'dsweb' servlet before including it indynamic HTML output. An attacker may be able to leverage this issueto inject arbitrary HTML and script code into a user's browser to beexecuted within the security context of the affected site. Note that the application is also reportedly affected by two...
http://www.edgeos.com/threats/32480

Fedora Core 7 2008-4440: cbrpager - (Found June 29, 2008 )

Critical Risk -- The remote host is missing the patch for the advisory FEDORA-2008-4440 (cbrpager).A no-nonsense, simple to use, small viewer for cbr and cbz(comic book archive) files. As it is written in C,the executable is small and fast. It views jpg (or jpeg),gif and png images, and you can zoom in and out.-Update Information:New version 0.9.17 is released:9http:sourceforge.netforumforum.phpforum_id=827120
http://www.edgeos.com/threats/32462

Fedora Core 9 2008-4386: kvm - (Found June 29, 2008 )

Critical Risk -- The remote host is missing the patch for the advisory FEDORA-2008-4386 (kvm).KVM (for Kernel-based Virtual Machine) is a full virtualization solutionfor Linux on x86 hardware.Using KVM, one can run multiple virtual machines running unmodified Linuxor Windows images. Each virtual machine has private virtualized hardware:a network card, disk, graphics adapter, etc.-ChangeLog:Update information : Tue May 27 2008 Glauber Costa <gcosta redhat com> - 65-7.fc9- Fix the build
http://www.edgeos.com/threats/32461

Fedora Core 9 2008-3979: libpng10 - (Found June 29, 2008 )

Critical Risk -- The remote host is missing the patch for the advisory FEDORA-2008-3979 (libpng10).The libpng10 package contains an old version of libpng, a library of functionsfor creating and manipulating PNG (Portable Network Graphics) image formatfiles.This package is needed if you want to run binaries that were linked dynamicallywith libpng 1.0.x.-Update Information:This update fixes the way that libpng10 handles unknown zero-length chunks,which in previous versions could result in writing.
http://www.edgeos.com/threats/32460

Fedora Core 9 2008-3937: libpng10 - (Found June 29, 2008 )

Critical Risk -- The remote host is missing the patch for the advisory FEDORA-2008-3937 (libpng10).The libpng10 package contains an old version of libpng, a library of functionsfor creating and manipulating PNG (Portable Network Graphics) image formatfiles.This package is needed if you want to run binaries that were linked dynamicallywith libpng 1.0.x.-Update Information:This update fixes the way that libpng10 handles unknown zero-length chunks,which in previous versions could result in writing.
http://www.edgeos.com/threats/32459

Fedora Core 9 2008-3683: libpng10 - (Found June 29, 2008 )

Critical Risk -- The remote host is missing the patch for the advisory FEDORA-2008-3683 (libpng10).The libpng10 package contains an old version of libpng, a library of functionsfor creating and manipulating PNG (Portable Network Graphics) image formatfiles.This package is needed if you want to run binaries that were linked dynamicallywith libpng 1.0.x.-Update Information:This update fixes the way that libpng10 handles unknown zero-length chunks,which in previous versions could result in writing.
http://www.edgeos.com/threats/32458