Test ID:	1.3.6.1.4.1.25623.1.0.802336
Category:	Mac OS X Local Security Checks
Title:	Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)
Summary:	This host is missing an important security update according to; Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006.
Description:	Summary: This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006. Vulnerability Insight: Please see the references for more information on the vulnerabilities. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code in the context of the browser, inject scripts, bypass certain security restrictions or cause a denial of service condition. Affected Software/OS: Apache, Application Firewall, ATS, BIND, Certificate Trust Policy, CFNetwork, CoreFoundation, CoreMedia, CoreProcesses, CoreStorage, File Systems, iChat Server, IOGraphics, Kernel, libsecurity, Mailman, MediaKit, Open Directory, PHP, postfix, python, QuickTime, SMB File Server, Tomcat, User Documentation, Web Server and X11. Solution: Run Mac Updates and update the Security Update 2011-006 CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0419 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html Debian Security Information: DSA-2237 (Google Search) http://www.debian.org/security/2011/dsa-2237 HPdes Security Advisory: HPSBMU02704 http://marc.info/?l=bugtraq&m=132033751509019&w=2 HPdes Security Advisory: HPSBOV02822 http://marc.info/?l=bugtraq&m=134987041210674&w=2 HPdes Security Advisory: HPSBUX02702 http://marc.info/?l=bugtraq&m=131551295528105&w=2 HPdes Security Advisory: HPSBUX02707 http://marc.info/?l=bugtraq&m=131731002122529&w=2 HPdes Security Advisory: SSRT100606 HPdes Security Advisory: SSRT100619 HPdes Security Advisory: SSRT100626 HPdes Security Advisory: SSRT100966 http://www.mandriva.com/security/advisories?name=MDVSA-2011:084 http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://cxib.net/stuff/apache.fnmatch.phps http://cxib.net/stuff/apr_fnmatch.txts http://www.mail-archive.com/dev@apr.apache.org/msg23961.html http://www.mail-archive.com/dev@apr.apache.org/msg23960.html http://www.mail-archive.com/dev@apr.apache.org/msg23976.html https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/re2e23465bbdb17ffe109d21b4f192e6b58221cd7aa8797d530b4cd75@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r688df6f16f141e966a0a47f817e559312b3da27886f59116a94b273d@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r064df0985779b7ee044d3120d71ba59750427cf53f57ba3384e3773f@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14638 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14804 http://www.redhat.com/support/errata/RHSA-2011-0507.html http://www.redhat.com/support/errata/RHSA-2011-0896.html http://www.redhat.com/support/errata/RHSA-2011-0897.html http://securitytracker.com/id?1025527 http://secunia.com/advisories/44490 http://secunia.com/advisories/44564 http://secunia.com/advisories/44574 http://secunia.com/advisories/48308 http://securityreason.com/securityalert/8246 http://securityreason.com/achievement_securityalert/98 SuSE Security Announcement: SUSE-SU-2011:1229 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00011.html Common Vulnerability Exposure (CVE) ID: CVE-2011-3192 BugTraq ID: 49303 http://www.securityfocus.com/bid/49303 CERT/CC vulnerability note: VU#405811 http://www.kb.cert.org/vuls/id/405811 Cisco Security Advisory: 20110830 Apache HTTPd Range Header Denial of Service Vulnerability http://www.cisco.com/en/US/products/products_security_advisory09186a0080b90d73.shtml http://www.exploit-db.com/exploits/17696 http://seclists.org/fulldisclosure/2011/Aug/175 http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0285.html HPdes Security Advisory: HPSBMU02766 http://marc.info/?l=bugtraq&m=133477473521382&w=2 HPdes Security Advisory: HPSBMU02776 http://marc.info/?l=bugtraq&m=133951357207000&w=2 HPdes Security Advisory: SSRT100624 HPdes Security Advisory: SSRT100852 http://www.mandriva.com/security/advisories?name=MDVSA-2011:130 http://mail-archives.apache.org/mod_mbox/httpd-announce/201108.mbox/%3c20110824161640.122D387DD@minotaur.apache.org%3e http://mail-archives.apache.org/mod_mbox/httpd-dev/201108.mbox/%3cCAAPSnn2PO-d-C4nQt_TES2RRWiZr7urefhTKPWBC1b+K1Dqc7g@mail.gmail.com%3e https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4@%3Ccvs.httpd.apache.org%3E https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10@%3Ccvs.httpd.apache.org%3E http://osvdb.org/74721 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14762 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14824 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18827 http://www.redhat.com/support/errata/RHSA-2011-1245.html http://www.redhat.com/support/errata/RHSA-2011-1294.html http://www.redhat.com/support/errata/RHSA-2011-1300.html http://www.redhat.com/support/errata/RHSA-2011-1329.html http://www.redhat.com/support/errata/RHSA-2011-1330.html http://www.redhat.com/support/errata/RHSA-2011-1369.html http://securitytracker.com/id?1025960 http://secunia.com/advisories/45606 http://secunia.com/advisories/45937 http://secunia.com/advisories/46000 http://secunia.com/advisories/46125 http://secunia.com/advisories/46126 SuSE Security Announcement: SUSE-SU-2011:1000 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00009.html SuSE Security Announcement: SUSE-SU-2011:1007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00010.html SuSE Security Announcement: SUSE-SU-2011:1010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00011.html SuSE Security Announcement: SUSE-SU-2011:1216 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00008.html SuSE Security Announcement: openSUSE-SU-2011:0993 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00006.html http://www.ubuntu.com/usn/USN-1199-1 XForce ISS Database: apache-http-byterange-dos(69396) https://exchange.xforce.ibmcloud.com/vulnerabilities/69396 Common Vulnerability Exposure (CVE) ID: CVE-2011-0185 BugTraq ID: 50085 http://www.securityfocus.com/bid/50085 BugTraq ID: 50092 http://www.securityfocus.com/bid/50092 Common Vulnerability Exposure (CVE) ID: CVE-2011-3437 http://osvdb.org/76356 XForce ISS Database: macos-type1-code-exec(70571) https://exchange.xforce.ibmcloud.com/vulnerabilities/70571 Common Vulnerability Exposure (CVE) ID: CVE-2011-0229 BugTraq ID: 50091 http://www.securityfocus.com/bid/50091 Common Vulnerability Exposure (CVE) ID: CVE-2011-0230 Common Vulnerability Exposure (CVE) ID: CVE-2011-1910 BugTraq ID: 48007 http://www.securityfocus.com/bid/48007 CERT/CC vulnerability note: VU#795694 http://www.kb.cert.org/vuls/id/795694 Debian Security Information: DSA-2244 (Google Search) http://www.debian.org/security/2011/dsa-2244 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061401.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061082.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061405.html FreeBSD Security Advisory: FreeBSD-SA-11:02 http://security.freebsd.org/advisories/FreeBSD-SA-11:02.bind.asc HPdes Security Advisory: HPSBUX03235 http://marc.info/?l=bugtraq&m=142180687100892&w=2 HPdes Security Advisory: SSRT101750 http://www.mandriva.com/security/advisories?name=MDVSA-2011:104 http://osvdb.org/72540 http://www.redhat.com/support/errata/RHSA-2011-0845.html http://www.securitytracker.com/id?1025572 http://secunia.com/advisories/44677 http://secunia.com/advisories/44719 http://secunia.com/advisories/44741 http://secunia.com/advisories/44744 http://secunia.com/advisories/44758 http://secunia.com/advisories/44762 http://secunia.com/advisories/44783 http://secunia.com/advisories/44929 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.685026 SuSE Security Announcement: openSUSE-SU-2011:0603 (Google Search) https://hermes.opensuse.org/messages/8699912 Common Vulnerability Exposure (CVE) ID: CVE-2011-2464 BugTraq ID: 48566 http://www.securityfocus.com/bid/48566 Bugtraq: 20110705 Security Advisory: CVE-2011-2464 - ISC BIND 9 Remote packet Denial of Service against Authoritative and Recursive Servers (Google Search) http://www.securityfocus.com/archive/1/518749/100/0/threaded CERT/CC vulnerability note: VU#142646 http://www.kb.cert.org/vuls/id/142646 Debian Security Information: DSA-2272 (Google Search) http://www.debian.org/security/2011/dsa-2272 http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062846.html http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062522.html HPdes Security Advisory: HPSBUX02719 http://marc.info/?l=bugtraq&m=131983337229394&w=2 HPdes Security Advisory: SSRT100658 http://www.mandriva.com/security/advisories?name=MDVSA-2011:115 http://osvdb.org/73605 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13997 http://www.redhat.com/support/errata/RHSA-2011-0926.html http://www.securitytracker.com/id?1025742 http://secunia.com/advisories/45082 http://secunia.com/advisories/45089 http://secunia.com/advisories/45143 http://secunia.com/advisories/45177 http://secunia.com/advisories/45185 http://secunia.com/advisories/45223 http://secunia.com/advisories/45410 http://secunia.com/advisories/45412 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.377171 SuSE Security Announcement: SUSE-SA:2011:029 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00002.html SuSE Security Announcement: SUSE-SU-2011:0759 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00004.html SuSE Security Announcement: openSUSE-SU-2011:0788 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00006.html https://www.ubuntu.com/usn/USN-1163-1/ XForce ISS Database: iscbind-update-dos(68375) https://exchange.xforce.ibmcloud.com/vulnerabilities/68375 Common Vulnerability Exposure (CVE) ID: CVE-2009-4022 1021660 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021660.1-1 1021798 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1 37118 http://www.securityfocus.com/bid/37118 37426 http://secunia.com/advisories/37426 37491 http://secunia.com/advisories/37491 38219 http://secunia.com/advisories/38219 38240 http://secunia.com/advisories/38240 38794 http://secunia.com/advisories/38794 38834 http://secunia.com/advisories/38834 39334 http://secunia.com/advisories/39334 40730 http://secunia.com/advisories/40730 60493 http://osvdb.org/60493 ADV-2009-3335 http://www.vupen.com/english/advisories/2009/3335 ADV-2010-0176 http://www.vupen.com/english/advisories/2010/0176 ADV-2010-0528 http://www.vupen.com/english/advisories/2010/0528 ADV-2010-0622 http://www.vupen.com/english/advisories/2010/0622 APPLE-SA-2011-10-12-3 FEDORA-2009-12218 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01172.html FEDORA-2009-12233 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01188.html IZ68597 http://www.ibm.com/support/docview.wss?uid=isg1IZ68597 IZ71667 http://www.ibm.com/support/docview.wss?uid=isg1IZ71667 IZ71774 http://www.ibm.com/support/docview.wss?uid=isg1IZ71774 MDVSA-2009:304 http://www.mandriva.com/security/advisories?name=MDVSA-2009:304 RHSA-2009:1620 http://www.redhat.com/support/errata/RHSA-2009-1620.html USN-888-1 http://www.ubuntu.com/usn/USN-888-1 VU#418861 http://www.kb.cert.org/vuls/id/418861 [oss-security] 20091124 CVE request: BIND 9 bug involving DNSSEC and the additional section http://www.openwall.com/lists/oss-security/2009/11/24/2 [oss-security] 20091124 Re: a new bind issue http://www.openwall.com/lists/oss-security/2009/11/24/8 [oss-security] 20091124 a new bind issue http://www.openwall.com/lists/oss-security/2009/11/24/1 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates http://lists.vmware.com/pipermail/security-announce/2010/000082.html bind-dnssec-cache-poisoning(54416) https://exchange.xforce.ibmcloud.com/vulnerabilities/54416 ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc http://support.apple.com/kb/HT5002 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018 https://bugzilla.redhat.com/show_bug.cgi?id=538744 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488 https://issues.rpath.com/browse/RPL-3152 https://www.isc.org/advisories/CVE-2009-4022v6 https://www.isc.org/advisories/CVE2009-4022 oval:org.mitre.oval:def:10821 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10821 oval:org.mitre.oval:def:11745 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11745 oval:org.mitre.oval:def:7261 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7261 oval:org.mitre.oval:def:7459 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7459 Common Vulnerability Exposure (CVE) ID: CVE-2010-0097 BugTraq ID: 37865 http://www.securityfocus.com/bid/37865 CERT/CC vulnerability note: VU#360341 http://www.kb.cert.org/vuls/id/360341 Debian Security Information: DSA-2054 (Google Search) http://www.debian.org/security/2010/dsa-2054 http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034196.html http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034202.html HPdes Security Advisory: HPSBUX02519 http://marc.info/?l=bugtraq&m=127195582210247&w=2 HPdes Security Advisory: SSRT100004 http://www.mandriva.com/security/advisories?name=MDVSA-2010:021 http://www.osvdb.org/61853 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12205 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7212 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7430 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9357 RedHat Security Advisories: RHSA-2010:0062 https://rhn.redhat.com/errata/RHSA-2010-0062.html RedHat Security Advisories: RHSA-2010:0095 https://rhn.redhat.com/errata/RHSA-2010-0095.html http://securitytracker.com/id?1023474 http://secunia.com/advisories/38169 http://secunia.com/advisories/39582 http://secunia.com/advisories/40086 SuSE Security Announcement: SUSE-SA:2010:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html http://www.vupen.com/english/advisories/2010/0981 http://www.vupen.com/english/advisories/2010/1352 XForce ISS Database: bind-dnssecnsec-cache-poisoning(55753) https://exchange.xforce.ibmcloud.com/vulnerabilities/55753 Common Vulnerability Exposure (CVE) ID: CVE-2010-3613 BugTraq ID: 45133 http://www.securityfocus.com/bid/45133 Bugtraq: 20110308 VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm. (Google Search) http://www.securityfocus.com/archive/1/516909/100/0/threaded CERT/CC vulnerability note: VU#706148 http://www.kb.cert.org/vuls/id/706148 Debian Security Information: DSA-2130 (Google Search) http://www.debian.org/security/2010/dsa-2130 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051963.html http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051910.html HPdes Security Advisory: HPSBUX02655 http://marc.info/?l=bugtraq&m=130270720601677&w=2 HPdes Security Advisory: SSRT100353 http://www.mandriva.com/security/advisories?name=MDVSA-2010:253 http://lists.vmware.com/pipermail/security-announce/2011/000126.html NETBSD Security Advisory: NetBSD-SA2011-001 http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-001.txt.asc http://www.osvdb.org/69558 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12601 http://www.redhat.com/support/errata/RHSA-2010-0975.html http://www.redhat.com/support/errata/RHSA-2010-0976.html http://www.redhat.com/support/errata/RHSA-2010-1000.html http://securitytracker.com/id?1024817 http://secunia.com/advisories/42374 http://secunia.com/advisories/42459 http://secunia.com/advisories/42522 http://secunia.com/advisories/42671 http://secunia.com/advisories/42707 http://secunia.com/advisories/43141 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.622190 http://www.ubuntu.com/usn/USN-1025-1 http://www.vupen.com/english/advisories/2010/3102 http://www.vupen.com/english/advisories/2010/3103 http://www.vupen.com/english/advisories/2010/3138 http://www.vupen.com/english/advisories/2010/3139 http://www.vupen.com/english/advisories/2010/3140 http://www.vupen.com/english/advisories/2011/0267 http://www.vupen.com/english/advisories/2011/0606 Common Vulnerability Exposure (CVE) ID: CVE-2010-3614 BugTraq ID: 45137 http://www.securityfocus.com/bid/45137 CERT/CC vulnerability note: VU#837744 http://www.kb.cert.org/vuls/id/837744 http://www.osvdb.org/69559 http://secunia.com/advisories/42435 Common Vulnerability Exposure (CVE) ID: CVE-2011-0231 Common Vulnerability Exposure (CVE) ID: CVE-2011-3246 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html BugTraq ID: 50115 http://www.securityfocus.com/bid/50115 XForce ISS Database: appleios-http-sec-bypass(70551) https://exchange.xforce.ibmcloud.com/vulnerabilities/70551 Common Vulnerability Exposure (CVE) ID: CVE-2011-0259 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html BugTraq ID: 50067 http://www.securityfocus.com/bid/50067 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16919 Common Vulnerability Exposure (CVE) ID: CVE-2011-0187 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html Common Vulnerability Exposure (CVE) ID: CVE-2011-0224 BugTraq ID: 50095 http://www.securityfocus.com/bid/50095 Common Vulnerability Exposure (CVE) ID: CVE-2011-0260 Common Vulnerability Exposure (CVE) ID: CVE-2011-3212 http://lists.apple.com/archives/security-announce/2012/May/msg00001.html http://osvdb.org/76362 Common Vulnerability Exposure (CVE) ID: CVE-2011-3213 Common Vulnerability Exposure (CVE) ID: CVE-2011-3214 Common Vulnerability Exposure (CVE) ID: CVE-2011-1755 BugTraq ID: 48250 http://www.securityfocus.com/bid/48250 http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061341.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061458.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061482.html http://www.mail-archive.com/jabberd2@lists.xiaoka.com/msg01655.html http://www.redhat.com/support/errata/RHSA-2011-0881.html http://www.redhat.com/support/errata/RHSA-2011-0882.html http://secunia.com/advisories/44787 http://secunia.com/advisories/44957 http://secunia.com/advisories/45112 SuSE Security Announcement: SUSE-SU-2011:0741 (Google Search) https://hermes.opensuse.org/messages/9197650 XForce ISS Database: jabberd-xml-entity-dos(67770) https://exchange.xforce.ibmcloud.com/vulnerabilities/67770 Common Vulnerability Exposure (CVE) ID: CVE-2011-3215 Common Vulnerability Exposure (CVE) ID: CVE-2011-3216 Common Vulnerability Exposure (CVE) ID: CVE-2011-3227 Common Vulnerability Exposure (CVE) ID: CVE-2011-0707 1025106 http://www.securitytracker.com/id?1025106 43294 http://secunia.com/advisories/43294 43389 http://secunia.com/advisories/43389 43425 http://secunia.com/advisories/43425 43549 http://secunia.com/advisories/43549 43580 http://secunia.com/advisories/43580 43829 http://secunia.com/advisories/43829 46464 http://www.securityfocus.com/bid/46464 70936 http://osvdb.org/70936 ADV-2011-0435 http://www.vupen.com/english/advisories/2011/0435 ADV-2011-0436 http://www.vupen.com/english/advisories/2011/0436 ADV-2011-0460 http://www.vupen.com/english/advisories/2011/0460 ADV-2011-0487 http://www.vupen.com/english/advisories/2011/0487 ADV-2011-0542 http://www.vupen.com/english/advisories/2011/0542 ADV-2011-0720 http://www.vupen.com/english/advisories/2011/0720 DSA-2170 http://www.debian.org/security/2011/dsa-2170 FEDORA-2011-2030 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056399.html FEDORA-2011-2102 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056387.html FEDORA-2011-2125 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056363.html MDVSA-2011:036 http://www.mandriva.com/security/advisories?name=MDVSA-2011:036 RHSA-2011:0307 http://www.redhat.com/support/errata/RHSA-2011-0307.html RHSA-2011:0308 http://www.redhat.com/support/errata/RHSA-2011-0308.html SUSE-SR:2011:009 http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html USN-1069-1 http://www.ubuntu.com/usn/USN-1069-1 [mailman-announce] 20110213 Mailman Security Patch Announcement http://mail.python.org/pipermail/mailman-announce/2011-February/000157.html [mailman-announce] 20110218 Mailman Security Patch Announcement http://mail.python.org/pipermail/mailman-announce/2011-February/000158.html mailman-fullname-xss(65538) https://exchange.xforce.ibmcloud.com/vulnerabilities/65538 openSUSE-SU-2011:0424 http://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html Common Vulnerability Exposure (CVE) ID: CVE-2011-3217 Common Vulnerability Exposure (CVE) ID: CVE-2011-3435 http://osvdb.org/76369 XForce ISS Database: macos-open-directory-info-disc(70584) https://exchange.xforce.ibmcloud.com/vulnerabilities/70584 Common Vulnerability Exposure (CVE) ID: CVE-2010-3436 42729 http://secunia.com/advisories/42729 42812 http://secunia.com/advisories/42812 44723 http://www.securityfocus.com/bid/44723 ADV-2010-3313 http://www.vupen.com/english/advisories/2010/3313 ADV-2011-0077 http://www.vupen.com/english/advisories/2011/0077 APPLE-SA-2011-03-21-1 MDVSA-2010:218 http://www.mandriva.com/security/advisories?name=MDVSA-2010:218 SSA:2010-357-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 USN-1042-1 http://www.ubuntu.com/usn/USN-1042-1 http://security-tracker.debian.org/tracker/CVE-2010-3436 http://support.apple.com/kb/HT4581 http://svn.php.net/viewvc/php/php-src/trunk/main/fopen_wrappers.c?r1=303824&r2=303823&pathrev=303824 http://svn.php.net/viewvc?view=revision&revision=303824 http://www.php.net/ChangeLog-5.php http://www.php.net/archive/2010.php#id2010-12-10-1 http://www.php.net/releases/5_2_15.php http://www.php.net/releases/5_3_4.php Common Vulnerability Exposure (CVE) ID: CVE-2010-4645 42843 http://secunia.com/advisories/42843 43051 http://secunia.com/advisories/43051 43189 http://secunia.com/advisories/43189 45668 http://www.securityfocus.com/bid/45668 ADV-2011-0060 http://www.vupen.com/english/advisories/2011/0060 ADV-2011-0066 http://www.vupen.com/english/advisories/2011/0066 ADV-2011-0198 http://www.vupen.com/english/advisories/2011/0198 FEDORA-2011-0321 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053355.html FEDORA-2011-0329 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053333.html HPSBMU02752 http://marc.info/?l=bugtraq&m=133226187115472&w=2 HPSBOV02763 http://marc.info/?l=bugtraq&m=133469208622507&w=2 RHSA-2011:0195 http://www.redhat.com/support/errata/RHSA-2011-0195.html RHSA-2011:0196 http://www.redhat.com/support/errata/RHSA-2011-0196.html SSA:2011-010-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.484686 SSRT100802 SSRT100826 [oss-security] 20110105 Re: possible flaw in widely used strtod.c implementation http://www.openwall.com/lists/oss-security/2011/01/05/8 [oss-security] 20110105 possible flaw in widely used strtod.c implementation http://www.openwall.com/lists/oss-security/2011/01/05/2 [oss-security] 20110106 Re: possible flaw in widely used strtod.c implementation http://www.openwall.com/lists/oss-security/2011/01/06/5 http://bugs.php.net/53632 http://hal.archives-ouvertes.fr/docs/00/28/14/29/PDF/floating-point-article.pdf http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/Zend/zend_strtod.c?r1=266327&r2=307095&pathrev=307095 http://www.exploringbinary.com/php-hangs-on-numeric-value-2-2250738585072011e-308/ php-zendstrtod-dos(64470) https://exchange.xforce.ibmcloud.com/vulnerabilities/64470 http://www.openwall.com/lists/oss-security/2023/05/14/3 Common Vulnerability Exposure (CVE) ID: CVE-2011-0420 BugTraq ID: 46429 http://www.securityfocus.com/bid/46429 Bugtraq: 20110216 PHP 5.3.5 grapheme_extract() NULL Pointer Dereference (Google Search) http://www.securityfocus.com/archive/1/516504/100/0/threaded Bugtraq: 20110217 Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference (Google Search) http://www.securityfocus.com/archive/1/516518/100/0/threaded CERT/CC vulnerability note: VU#210829 http://www.kb.cert.org/vuls/id/210829 Debian Security Information: DSA-2266 (Google Search) http://www.debian.org/security/2011/dsa-2266 http://www.exploit-db.com/exploits/16182 http://svn.php.net/viewvc/php/php-src/trunk/ext/intl/grapheme/grapheme_string.c?r1=306449&r2=306448&pathrev=306449 http://securityreason.com/securityalert/8087 http://securityreason.com/achievement_securityalert/94 XForce ISS Database: php-graphemeextract-dos(65437) https://exchange.xforce.ibmcloud.com/vulnerabilities/65437 Common Vulnerability Exposure (CVE) ID: CVE-2011-0421 BugTraq ID: 46354 http://www.securityfocus.com/bid/46354 Bugtraq: 20110318 libzip 0.9.3 _zip_name_locate NULL Pointer Dereference (incl PHP 5.3.5) (Google Search) http://www.securityfocus.com/archive/1/517065/100/0/threaded http://www.exploit-db.com/exploits/17004 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056642.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057709.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057710.html HPdes Security Advisory: HPSBOV02763 HPdes Security Advisory: SSRT100826 http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 http://www.mandriva.com/security/advisories?name=MDVSA-2011:099 http://secunia.com/advisories/43621 http://securityreason.com/securityalert/8146 http://securityreason.com/achievement_securityalert/96 SuSE Security Announcement: SUSE-SR:2011:009 (Google Search) http://www.vupen.com/english/advisories/2011/0744 http://www.vupen.com/english/advisories/2011/0764 http://www.vupen.com/english/advisories/2011/0890 XForce ISS Database: libzip-zipnamelocate-dos(66173) https://exchange.xforce.ibmcloud.com/vulnerabilities/66173 Common Vulnerability Exposure (CVE) ID: CVE-2011-0708 16261 http://www.exploit-db.com/exploits/16261/ 46365 http://www.securityfocus.com/bid/46365 8114 http://securityreason.com/securityalert/8114 ADV-2011-0744 ADV-2011-0764 ADV-2011-0890 DSA-2266 FEDORA-2011-3614 FEDORA-2011-3636 FEDORA-2011-3666 MDVSA-2011:052 MDVSA-2011:053 RHSA-2011:1423 http://www.redhat.com/support/errata/RHSA-2011-1423.html RHSA-2012:0071 http://rhn.redhat.com/errata/RHSA-2012-0071.html [oss-security] 20110214 PHP Exif 64bit Casting Vulnerability, CVE request http://openwall.com/lists/oss-security/2011/02/14/1 [oss-security] 20110216 Re: Re: PHP Exif 64bit Casting Vulnerability, CVE request http://openwall.com/lists/oss-security/2011/02/16/7 http://bugs.php.net/bug.php?id=54002 http://svn.php.net/viewvc?view=revision&revision=308316 http://www.php.net/archive/2011.php http://www.php.net/releases/5_3_6.php https://bugzilla.redhat.com/show_bug.cgi?id=680972 Common Vulnerability Exposure (CVE) ID: CVE-2011-1092 16966 http://www.exploit-db.com/exploits/16966 46786 http://www.securityfocus.com/bid/46786 8130 http://securityreason.com/securityalert/8130 [oss-security] 20110308 CVE request, php's shm http://www.openwall.com/lists/oss-security/2011/03/08/9 [oss-security] 20110308 Re: CVE request, php's shm http://www.openwall.com/lists/oss-security/2011/03/08/11 http://bugs.php.net/bug.php?id=54193 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/shmop/shmop.c?r1=306939&r2=309018&pathrev=309018 https://bugzilla.redhat.com/show_bug.cgi?id=683183 php-shmopread-overflow(65988) https://exchange.xforce.ibmcloud.com/vulnerabilities/65988 Common Vulnerability Exposure (CVE) ID: CVE-2011-1153 43744 http://secunia.com/advisories/43744 46854 http://www.securityfocus.com/bid/46854 [oss-security] 20110314 CVE request: format-string vulnerability in PHP Phar extension http://openwall.com/lists/oss-security/2011/03/14/13 [oss-security] 20110314 Re: CVE request: format-string vulnerability in PHP Phar extension http://openwall.com/lists/oss-security/2011/03/14/14 http://openwall.com/lists/oss-security/2011/03/14/24 http://bugs.php.net/bug.php?id=54247 http://svn.php.net/viewvc?view=revision&revision=309221 https://bugzilla.redhat.com/show_bug.cgi?id=688378 php-pharobject-format-string(66079) https://exchange.xforce.ibmcloud.com/vulnerabilities/66079 Common Vulnerability Exposure (CVE) ID: CVE-2011-1466 BugTraq ID: 46967 http://www.securityfocus.com/bid/46967 RedHat Security Advisories: RHSA-2012:0071 http://secunia.com/advisories/48668 SuSE Security Announcement: openSUSE-SU-2012:0426 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html Common Vulnerability Exposure (CVE) ID: CVE-2011-1467 BugTraq ID: 46968 http://www.securityfocus.com/bid/46968 Common Vulnerability Exposure (CVE) ID: CVE-2011-1468 BugTraq ID: 46977 http://www.securityfocus.com/bid/46977 Common Vulnerability Exposure (CVE) ID: CVE-2011-1469 BugTraq ID: 46970 http://www.securityfocus.com/bid/46970 Common Vulnerability Exposure (CVE) ID: CVE-2011-1470 BugTraq ID: 46969 http://www.securityfocus.com/bid/46969 Common Vulnerability Exposure (CVE) ID: CVE-2011-1471 BugTraq ID: 46975 http://www.securityfocus.com/bid/46975 Common Vulnerability Exposure (CVE) ID: CVE-2011-0411 BugTraq ID: 46767 http://www.securityfocus.com/bid/46767 CERT/CC vulnerability note: VU#555316 http://www.kb.cert.org/vuls/id/555316 Debian Security Information: DSA-2233 (Google Search) http://www.debian.org/security/2011/dsa-2233 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056560.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056559.html http://security.gentoo.org/glsa/glsa-201206-33.xml http://www.openwall.com/lists/oss-security/2021/08/10/2 http://www.osvdb.org/71021 http://www.redhat.com/support/errata/RHSA-2011-0422.html http://www.redhat.com/support/errata/RHSA-2011-0423.html http://securitytracker.com/id?1025179 http://secunia.com/advisories/43646 http://secunia.com/advisories/43874 http://www.vupen.com/english/advisories/2011/0611 http://www.vupen.com/english/advisories/2011/0752 http://www.vupen.com/english/advisories/2011/0891 XForce ISS Database: multiple-starttls-command-execution(65932) https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 Common Vulnerability Exposure (CVE) ID: CVE-2010-1634 39937 http://secunia.com/advisories/39937 40194 http://secunia.com/advisories/40194 40370 http://www.securityfocus.com/bid/40370 42888 http://secunia.com/advisories/42888 43068 http://secunia.com/advisories/43068 50858 http://secunia.com/advisories/50858 51024 http://secunia.com/advisories/51024 51040 http://secunia.com/advisories/51040 51087 http://secunia.com/advisories/51087 ADV-2010-1448 http://www.vupen.com/english/advisories/2010/1448 ADV-2011-0122 http://www.vupen.com/english/advisories/2011/0122 ADV-2011-0212 http://www.vupen.com/english/advisories/2011/0212 FEDORA-2010-9652 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042751.html RHSA-2011:0027 http://www.redhat.com/support/errata/RHSA-2011-0027.html SUSE-SR:2010:024 http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html SUSE-SR:2011:002 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html USN-1596-1 http://www.ubuntu.com/usn/USN-1596-1 USN-1613-1 http://www.ubuntu.com/usn/USN-1613-1 USN-1613-2 http://www.ubuntu.com/usn/USN-1613-2 USN-1616-1 http://www.ubuntu.com/usn/USN-1616-1 http://bugs.python.org/issue8674 http://svn.python.org/view?rev=81045&view=rev http://svn.python.org/view?rev=81079&view=rev https://bugzilla.redhat.com/show_bug.cgi?id=590690 Common Vulnerability Exposure (CVE) ID: CVE-2010-2089 BugTraq ID: 40863 http://www.securityfocus.com/bid/40863 SuSE Security Announcement: SUSE-SR:2010:024 (Google Search) SuSE Security Announcement: SUSE-SR:2011:002 (Google Search) Common Vulnerability Exposure (CVE) ID: CVE-2011-1521 http://www.mandriva.com/security/advisories?name=MDVSA-2011:096 http://openwall.com/lists/oss-security/2011/03/24/5 http://openwall.com/lists/oss-security/2011/03/28/2 http://openwall.com/lists/oss-security/2011/09/11/1 http://openwall.com/lists/oss-security/2011/09/13/2 http://openwall.com/lists/oss-security/2011/09/15/5 http://securitytracker.com/id?1025488 http://www.ubuntu.com/usn/USN-1592-1 Common Vulnerability Exposure (CVE) ID: CVE-2011-3228 BugTraq ID: 50127 http://www.securityfocus.com/bid/50127 http://osvdb.org/76372 Common Vulnerability Exposure (CVE) ID: CVE-2011-0249 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16089 Common Vulnerability Exposure (CVE) ID: CVE-2011-0250 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15885 Common Vulnerability Exposure (CVE) ID: CVE-2011-0251 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16143 Common Vulnerability Exposure (CVE) ID: CVE-2011-0252 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15884 Common Vulnerability Exposure (CVE) ID: CVE-2011-3218 BugTraq ID: 50122 http://www.securityfocus.com/bid/50122 http://osvdb.org/76373 Common Vulnerability Exposure (CVE) ID: CVE-2011-3219 http://osvdb.org/76374 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17228 Common Vulnerability Exposure (CVE) ID: CVE-2011-3220 BugTraq ID: 50130 http://www.securityfocus.com/bid/50130 http://osvdb.org/76377 Common Vulnerability Exposure (CVE) ID: CVE-2011-3221 http://osvdb.org/76378 Common Vulnerability Exposure (CVE) ID: CVE-2011-3222 http://osvdb.org/76379 Common Vulnerability Exposure (CVE) ID: CVE-2011-3223 http://osvdb.org/76380 Common Vulnerability Exposure (CVE) ID: CVE-2011-3225 http://osvdb.org/76376 Common Vulnerability Exposure (CVE) ID: CVE-2010-1157 20100421 [SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability http://www.securityfocus.com/archive/1/510879/100/0/threaded 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX http://www.securityfocus.com/archive/1/516397/100/0/threaded 39574 http://secunia.com/advisories/39574 39635 http://www.securityfocus.com/bid/39635 42368 http://secunia.com/advisories/42368 43310 http://secunia.com/advisories/43310 57126 http://secunia.com/advisories/57126 ADV-2010-0980 http://www.vupen.com/english/advisories/2010/0980 ADV-2010-3056 http://www.vupen.com/english/advisories/2010/3056 DSA-2207 http://www.debian.org/security/2011/dsa-2207 HPSBOV02762 http://marc.info/?l=bugtraq&m=133469267822771&w=2 HPSBST02955 http://marc.info/?l=bugtraq&m=139344343412337&w=2 HPSBUX02579 http://marc.info/?l=bugtraq&m=129070310906557&w=2 HPSBUX02860 http://marc.info/?l=bugtraq&m=136485229118404&w=2 MDVSA-2010:176 http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 MDVSA-2010:177 http://www.mandriva.com/security/advisories?name=MDVSA-2010:177 RHSA-2011:0896 RHSA-2011:0897 SSRT100203 SSRT100825 SSRT101146 SUSE-SR:2010:017 http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html [tomcat-dev] 20190319 svn commit: r1855831 [22/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20190325 svn commit: r1856174 [20/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200203 svn commit: r1873527 [22/30] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E [tomcat-dev] 20200213 svn commit: r1873980 [25/34] - /tomcat/site/trunk/docs/ https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E http://svn.apache.org/viewvc?view=revision&revision=936540 http://svn.apache.org/viewvc?view=revision&revision=936541 http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html http://www.vmware.com/security/advisories/VMSA-2011-0003.html http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html oval:org.mitre.oval:def:19492 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19492 Common Vulnerability Exposure (CVE) ID: CVE-2010-2227 BugTraq ID: 41544 http://www.securityfocus.com/bid/41544 Bugtraq: 20100709 [SECURITY] CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability (Google Search) http://www.securityfocus.com/archive/1/512272/100/0/threaded Bugtraq: 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX (Google Search) Debian Security Information: DSA-2207 (Google Search) http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050207.html http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050214.html HPdes Security Advisory: HPSBST02955 HPdes Security Advisory: HPSBUX02579 HPdes Security Advisory: HPSBUX02860 HPdes Security Advisory: SSRT100203 HPdes Security Advisory: SSRT101146 https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18532 http://www.redhat.com/support/errata/RHSA-2010-0580.html http://www.redhat.com/support/errata/RHSA-2010-0581.html http://www.redhat.com/support/errata/RHSA-2010-0582.html http://www.redhat.com/support/errata/RHSA-2010-0583.html http://securitytracker.com/id?1024180 http://secunia.com/advisories/40813 http://secunia.com/advisories/41025 http://secunia.com/advisories/42079 http://secunia.com/advisories/42454 http://secunia.com/advisories/44183 SuSE Security Announcement: SUSE-SR:2010:017 (Google Search) http://www.vupen.com/english/advisories/2010/1986 http://www.vupen.com/english/advisories/2010/2868 XForce ISS Database: tomcat-transferencoding-dos(60264) https://exchange.xforce.ibmcloud.com/vulnerabilities/60264 Common Vulnerability Exposure (CVE) ID: CVE-2010-3718 1025025 http://www.securitytracker.com/id?1025025 20110205 [SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions http://www.securityfocus.com/archive/1/516211/100/0/threaded 43192 http://secunia.com/advisories/43192 45022 http://secunia.com/advisories/45022 46177 http://www.securityfocus.com/bid/46177 8072 http://securityreason.com/securityalert/8072 DSA-2160 http://www.debian.org/security/2011/dsa-2160 HPSBUX02645 http://marc.info/?l=bugtraq&m=130168502603566&w=2 HPSBUX02725 http://marc.info/?l=bugtraq&m=132215163318824&w=2 MDVSA-2011:030 http://www.mandriva.com/security/advisories?name=MDVSA-2011:030 RHSA-2011:0791 http://www.redhat.com/support/errata/RHSA-2011-0791.html RHSA-2011:1845 http://www.redhat.com/support/errata/RHSA-2011-1845.html SSRT100627 SUSE-SR:2011:005 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html http://tomcat.apache.org/security-7.html oval:org.mitre.oval:def:12517 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12517 oval:org.mitre.oval:def:13969 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13969 oval:org.mitre.oval:def:19379 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19379 tomcat-servletcontect-sec-bypass(65159) https://exchange.xforce.ibmcloud.com/vulnerabilities/65159 Common Vulnerability Exposure (CVE) ID: CVE-2010-4172 1024764 http://securitytracker.com/id?1024764 20101122 [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html http://www.securityfocus.com/archive/1/514866/100/0/threaded 42337 http://secunia.com/advisories/42337 43019 http://secunia.com/advisories/43019 45015 http://www.securityfocus.com/bid/45015 ADV-2010-3047 http://www.vupen.com/english/advisories/2010/3047 ADV-2011-0203 http://www.vupen.com/english/advisories/2011/0203 USN-1048-1 http://www.ubuntu.com/usn/USN-1048-1 http://svn.apache.org/viewvc?view=revision&revision=1037778 http://svn.apache.org/viewvc?view=revision&revision=1037779 https://bugzilla.redhat.com/show_bug.cgi?id=656246 tomcat-sessionlist-xss(63422) https://exchange.xforce.ibmcloud.com/vulnerabilities/63422 Common Vulnerability Exposure (CVE) ID: CVE-2011-0013 1025026 http://www.securitytracker.com/id?1025026 20110205 [SECURITY] CVE-2011-0013 Apache Tomcat Manager XSS vulnerability http://www.securityfocus.com/archive/1/516209/30/90/threaded 46174 http://www.securityfocus.com/bid/46174 8093 http://securityreason.com/securityalert/8093 ADV-2011-0376 http://www.vupen.com/english/advisories/2011/0376 http://tomcat.apache.org/security-5.html#Fixed_in_Apache_Tomcat_5.5.32 http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.30 http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.6_%28released_14_Jan_2011%29 https://bugzilla.redhat.com/show_bug.cgi?id=675786 oval:org.mitre.oval:def:12878 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12878 oval:org.mitre.oval:def:14945 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14945 oval:org.mitre.oval:def:19269 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19269 Common Vulnerability Exposure (CVE) ID: CVE-2011-0534 BugTraq ID: 46164 http://www.securityfocus.com/bid/46164 Bugtraq: 20110205 [SECURITY] CVE-2011-0534 Apache Tomcat DoS vulnerability (Google Search) http://www.securityfocus.com/archive/1/516214/100/0/threaded Debian Security Information: DSA-2160 (Google Search) http://osvdb.org/70809 http://www.securitytracker.com/id?1025027 http://securityreason.com/securityalert/8074 SuSE Security Announcement: SUSE-SR:2011:005 (Google Search) http://www.vupen.com/english/advisories/2011/0293 XForce ISS Database: tomcat-nio-connector-dos(65162) https://exchange.xforce.ibmcloud.com/vulnerabilities/65162 Common Vulnerability Exposure (CVE) ID: CVE-2011-3224 http://osvdb.org/76375 Common Vulnerability Exposure (CVE) ID: CVE-2011-2690 45046 http://secunia.com/advisories/45046 45405 http://secunia.com/advisories/45405 45415 http://secunia.com/advisories/45415 45460 http://secunia.com/advisories/45460 45461 http://secunia.com/advisories/45461 45492 http://secunia.com/advisories/45492 48660 http://www.securityfocus.com/bid/48660 49660 http://secunia.com/advisories/49660 DSA-2287 http://www.debian.org/security/2011/dsa-2287 FEDORA-2011-9336 http://lists.fedoraproject.org/pipermail/package-announce/2011-July/063118.html GLSA-201206-15 http://security.gentoo.org/glsa/glsa-201206-15.xml MDVSA-2011:151 http://www.mandriva.com/security/advisories?name=MDVSA-2011:151 RHSA-2011:1104 http://www.redhat.com/support/errata/RHSA-2011-1104.html RHSA-2011:1105 http://www.redhat.com/support/errata/RHSA-2011-1105.html USN-1175-1 http://www.ubuntu.com/usn/USN-1175-1 [oss-security] 20110713 Security issues fixed in libpng 1.5.4 http://www.openwall.com/lists/oss-security/2011/07/13/2 http://www.libpng.org/pub/png/libpng.html https://bugzilla.redhat.com/show_bug.cgi?id=720607 libpng-pngrgbtogray-bo(68538) https://exchange.xforce.ibmcloud.com/vulnerabilities/68538 Common Vulnerability Exposure (CVE) ID: CVE-2011-2691 HPSBMU02776 SSRT100852 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=9dad5e37aef295b4ef8dea39392b652deebc9261 https://bugzilla.redhat.com/show_bug.cgi?id=720608 libpng-pngdefaulterror-dos(68537) https://exchange.xforce.ibmcloud.com/vulnerabilities/68537 Common Vulnerability Exposure (CVE) ID: CVE-2011-2692 45445 http://secunia.com/advisories/45445 48618 http://www.securityfocus.com/bid/48618 APPLE-SA-2012-05-09-1 RHSA-2011:1103 http://www.redhat.com/support/errata/RHSA-2011-1103.html VU#819894 http://www.kb.cert.org/vuls/id/819894 http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commit%3Bh=61a2d8a2a7b03023e63eae9a3e64607aaaa6d339 http://sourceforge.net/mailarchive/forum.php?thread_name=003101cc2790%24fb5d6e80%24f2184b80%24%40acm.org&forum_name=png-mng-implement http://support.apple.com/kb/HT5281 https://bugzilla.redhat.com/show_bug.cgi?id=720612 libpng-png-file-dos(68536) https://exchange.xforce.ibmcloud.com/vulnerabilities/68536 Common Vulnerability Exposure (CVE) ID: CVE-2011-3436 http://osvdb.org/76370 XForce ISS Database: macos-open-directory-sec-bypass(70585) https://exchange.xforce.ibmcloud.com/vulnerabilities/70585 Common Vulnerability Exposure (CVE) ID: CVE-2011-3226 http://osvdb.org/76371 Common Vulnerability Exposure (CVE) ID: CVE-2011-0226 http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html BugTraq ID: 48619 http://www.securityfocus.com/bid/48619 Debian Security Information: DSA-2294 (Google Search) http://www.debian.org/security/2011/dsa-2294 http://www.mandriva.com/security/advisories?name=MDVSA-2011:120 http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html http://www.redhat.com/support/errata/RHSA-2011-1085.html http://secunia.com/advisories/45167 http://secunia.com/advisories/45224 SuSE Security Announcement: SUSE-SU-2011:0853 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html SuSE Security Announcement: openSUSE-SU-2011:0852 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.