Entire Site
DOE-CIRC
DOE-CIRC Home
DOE-CIRC Home
About CIRC
About CIRC
Incident Reporting
Incident Reporting
Scope
Reportable Incidents
Reporting Procedures
Report Content
Forms
Negative Reporting
Bulletins
Bulletins
Latest
Latest
High Risk
High Risk
Revised
Revised
Bulletin Archive
Bulletin Archive
Technical Bulletins
Technical Bulletins
Search
Search
C-Notes
C-Notes
Recent C-Notes
Recent C-Notes
C-Notes Archive
C-Notes Archive
Documents
and Publications
Documents and Publications
CIRC Documents
Other Publications
Conference Proceedings
Public Law
Tools
Tools
NID and SafePatch
DISA INFOSEC Tools
Multi-Platform Trusted Copy
IEBT v.1.01
Public Tools
-Windows
-Windows
-MAC
-MAC
-UNIX
-UNIX
Security Links
Security Links
Advanced Search
Advanced Search
Contact CIRC
Contact CIRC
Maintenance Schedule
The DOE-CIRC server will be unavailable during the following scheduled events:
Routine maintenance:
Every Thursday from 5:00 - 9:00pm (PST)
You are here:
DOE Home
>
CIO Home
>
CIRC Home
>
Bulletins
>
Archive
>
T Series
T Series Bulletins (FY 2009):
T-001: LANDesk QIP Vulnerability
T-002: Vulnerability in Host Integration Server RPC Service
T-003: Vulnerabilities in Microsoft Excel
T-004: Cumulative Security Update for Internet Explorer
T-005: Vulnerability in Active Directory
T-006: Vulnerabilities in Windows Kernel
T-007: Vulnerability in Windows Internet Printing Service
T-008: Vulnerability in Virtual Address Descriptor Manipulation
T-009: Vulnerability in Message Queuing
T-010: Vulnerability in the Microsoft Ancillary Function Driver
T-011: Oracle Critical Patch Update Advisory - October 2008
T-012: MPlayer Vulnerability
T-013: Mac OS X v10.5.5 and Security Update 2008-006
T-014: InstallShield Update Service Agent ActiveX Vulnerability
T-015: InstallShield / Macrovision / Acresso FLEXnet Connect Vulnerabilities
T-016: iseemedia / Roxio / MGI Software LPViewer ActiveX Vulnerabilities
T-017: Gear Software CD DVD Filter Vulnerability
T-018: Vulnerability in Server Service
T-019: libxml2 Vulnerability
T-020: Security Update for Adobe Reader 8 and Acrobat 8
T-021: libspf2 DNS TXT Vulnerability
T-022: OpenOffice.org Security Vulnerabilities
T-023: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
T-024: Vulnerability in Server Message Block (SMB)
T-025: Vulnerabilities in Microsoft XML Core Services
DOECIRC T-026: DOE-CIRC Technical Bulletin T-026 Zero-day exploit for Internet Explorer
T-027: Vulnerability in SQL Server Could Allow Remote Code Execution
DOECIRC T-028: New php-xajax packages fix cross-site scripting
DOECIRC T-029: Linux Kernel Malformed 'msghdr' Structure Remote Denial of Service Vulnerability
T-030: New Ruby packages fix denial of service
T-031: SolucionWeb "id_area" SQL Injection Vulnerability
T-032: New Xterm Packages Fix Regression
T-033: OpenSSL Security Advisory
T-034: Vulnerability Discovered In XOOPS
T-035: Microsoft RPC Worm Spreads in Corporate Networks
T-036: Vulnerabilities in SMB Could Allow Remote Code Execution (MS09-001) - Critical
T-037: Oracle Has Released The January 2009 Critical Patch Update.
T-038: Cisco ONS Platform Crafted Packet Vulnerability
T-039: Sun Java System Access Manager Privilege Vulnerability And Password Security Issue
T-040: Sun SPARC Enterprise Server Authentication Bypass Vulnerability
T-041: Symantec AppStream Client LaunchObj ActiveX Control Insecure Methods
T-042: Linux Kernel "keyctl_join_session_keyring()" Denial of Service
T-043: Apple QuickTime Memory Corruption and Buffer Overflow Vulnerabilities
T-044: Apple QuickTime MPEG-2 Playback Component For Windows Input Validation Vulnerability
T-045: CYV4: Linux Kernel dell_rbu Denial of Service Security Issues
T-046: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability
T-047: Sun Solaris "libike" Library Denial of Service
T-048: Computer Assosciates Anti-Virus Engine 'arclib.dll' Multiple Scan Evasion Vulnerabilities
T-049: Sun Solaris IPv6 Packet Processing Denial of Service Vulnerability
T-050: Sun Solaris Pseudo-terminal Driver Local Denial of Service Vulnerability
T-051: Sun Java System Access Manager User Enumeration Weakness
T-052: Sun Solaris BIND "EVP_VerifyFinal()" and "DSA_do_verify()" Spoofing Vulnerability
T-053: Buffer Overflows in RealNetworks Helix Server and Helix Mobile Server Allow Remote Attackers to Cause a Denial of Servic
T-054: Mozilla Firefox/Thunderbird/SeaMonkey Multiple Remote Vulnerabilities Bypass Same-Origin Restrictions
T-055: Cisco IOS HTTP Server Multiple Cross Site Scripting Vulnerabilities
T-056: RealNetworks RealPlayer IVR File Parsing Multiple Vulnerabilities
T-057: Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital
Senders, Remote Unauthorized Access to Files
T-058: RealPlayer IVR File Processing Two Vulnerabilities
T-059: Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution
T-060: Cumulative Security Update for Internet Explorer 7
T-061: pam-krb5 'KRB5CCNAME' Environment Variable Local Privilege Escalation Vulnerability
T-062: Unspecified Vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6
T-063: Apple Mac OS X SMB Component Unspecified Buffer Overflow Vulnerability
T-064: BlackBerry Application Web Loader ActiveX Control Remote Buffer Overflow Vulnerability
T-065: Adobe Acrobat and Reader PDF File Handling Remote Code Execution Vulnerability
T-066: Multiple HTTP Proxy HTTP Host Header Incorrect Relay Behavior Vulnerability
T-067: Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution
T-068: Microsoft Windows AutoRun and AutoPlay Vulnerability
T-069: HP OpenView Network Node Manager Vulnerable to Denial of Service
T-070: Cisco Unified MeetingPlace Web Conferencing Authentication Bypass Vulnerability
T-071: Novell eDirectory Management Console Accept-Language Buffer Overflow
T-072: Adobe Flash Player Invalid Object Reference Bug Lets Remote Users Execute Arbitrary Code
T-073: New proftpd-dfsg packages fix SQL injection vulnerabilites
T-074: XML Data Theft Via RDFXML DataSource and Cross-Domain Redirect
T-075: VMware Server 1.0.5 and Workstation 6.0.3 Multiple Vulnerabilities
T-076: OpenSC PKCS#11 Implementation Unauthorized Access Vulnerability
T-077: IBM Tivoli Storage Manager HSM Buffer Overflow Vulnerability
T-078: Microsoft Windows Kernel GDI EMF/WMF Remote Code Execution Vulnerability
T-079: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability
T-080: Hewlett-Packard WMI Mapper for HP Systems Insight Manager Unauthorized Access Vulnerabilities
T-081: Libpng Library Uninitialized Pointer Arrays Memory Corruption Vulnerabilities
T-082: Opera Web Browser HTML Parsing Heap-Based Remote Code Execution Vulnerability
T-083: Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
T-084: Tasklist Drupal Module Unspecified SQL Injection Vulnerability
T-085: T-086: Linux Kernel 'readlink' Local Privilege Escalation Vulnerability
T-086: Linux Kernel 'readlink' Local Privilege Escalation Vulnerability
T-087: Sun Solaris NFS Daemon (nfsd(1M)) Security Bypass Vulnerability
T-088: HP-UX VERITAS File System and VERITAS Oracle Disk Manager Local Privilege Escalation Vulnerability
T-089: pam-krb5 Local Privilege Escalation Vulnerability
T-090: Squid Web Proxy Cache HTTP Version Number Parsing Denial of Service Vulnerability
T-091: Conficker Worm Targets Microsoft Windows Systems
T-092: Mozilla Firefox '_moveToEdgeShift' Remote Code Execution Vulnerability
T-093: Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
T-094: Wireshark PN-DCP Data Format String Vulnerability
T-095: Microsoft Office PowerPoint code execution vulnerability
T-096: Clam AV 0.94 and below Rar Evasion Vulnerability
T-097:
T-098: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances
T-099: Linux Kernel CIFS Remote Buffer Overflow Vulnerability
T-100: Tor Security Bypass And Privilege Escalation Weaknesses
T-101: Vmware Flaw in Multiple Products Allows Compromise of Host System
T-102: Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution
T-103: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution
T-104: Vulnerabilities in Windows HTTP services could allow remote code execution
T-105: Critical Cumulative Security Update for Internet Explorer (963027)
T-106: Vulnerabilities in Microsoft Office Excel Could Cause Remote Code Execution (968557)
T-107: Vulnerabilities in Windows Could Allow Elevation of Privilege (959454)
T-108: Vulnerabilities in Microsoft ISA Server and Forefront Threat Management Gateway (Medium Business Edition) Could Cause De
T-109: Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)
T-110: OpenBSD PF Remote Denial of Service Vulnerability
T-111: Oracle April 2009 Critical Patch Update
T-112: CUPS Integer Overflow in Processing TIFF Images Lets Remote Users Execute Arbitrary Code
T-113: udev Netlink Message Validation Local Privilege Escalation Vulnerability
T-114: Xpdf JBIG2 Processing Multiple Security Vulnerabilities
T-115: Multiple Vulnerabilities in Firefox, Thunderbird and Seamonkey
T-116: Symantec Norton Ghost 'EasySetupInt.dll' ActiveX Multiple Remote Denial of Service Vulnerabilities
T-117: Sun Java System Delegated Administrator HTTP Response Splitting Vulnerability
T-118: GNOME glib Base64 Encoding and Decoding Multiple Integer Overflow Vulnerabilities
T-119: Symantec Brightmail Gateway Appliance Cross-site Scripting and Elevation of Privilege
T-120: Adobe Reader 'spell.customDictionaryOpen()' JavaScript Function Remote Code Execution Vulnerability
T-121: Linux Kernel 'exit_notify()' CAP_KILL Verification Local Privilege Escalation Vulnerability
T-122: McAfee Products RAR/ZIP Files Scan Evasion Vulnerability
T-123: CA ARCserve Backup Apache HTTP Server Multiple Vulnerabilities
T-124: Linux Kernel 'FWD-TSN' Chunk Remote Buffer Overflow Vulnerability
T-125: The Linux kernel is prone to a local privilege-escalation vulnerability via ptrace_attach().
T-126: Insight Control Suite For Linux (ICE-LX) Multiple Remote Vulnerabilities In Nagios
T-127: Multiple F-Secure Products RAR/ZIP Files Scan Evasion Vulnerability
T-128: Adobe Flash Media Server Unspecified RPC Call Privilege Escalation Vulnerability
T-129: HP OpenView Network Node Manager 'ovalarmsrv.exe' Remote Code Execution Vulnerability
T-130: F-PROT Products CAB File Scan Evasion Vulnerability
T-131: Multiple AVG Products RAR/ZIP Files Scan Evasion Vulnerability
T-132: Multiple Trend Micro Products RAR/ZIP Files Scan Evasion Vulnerability
T-133: Little CMS Monochrome Profiles Null Pointer Dereference Denial of Service Vulnerability
T-134: Microsoft PowerPoint Notes Container Heap Memory Corruption Remote Code Execution Vulnerability
T-135: Apple Mac OS X Help Viewer HTML Document Remote Code Execution Vulnerability
T-136: Apple Mac OS X PICT Image Handling Integer Overflow Vulnerability
T-137: Microsoft IIS 6.0 WebDAV Remote Authentication Bypass
T-138: NTP 'ntpd' Autokey and ntpq Stack Buffer Overflow Vulnerability
T-139: Linux Kernel 'FWD-TSN' Chunk Remote Buffer Overflow Vulnerability
T-140: CiscoWorks Common Services TFTP Server Directory Traversal Vulnerability
T-141: Novell GroupWise Buffer Overflow and Cross Site Scripting Vulnerabilities
T-142: Basic Analysis and Security Engine Cross-Site Scripting Vulnerability
T-143: Pidgin Multiple Buffer Overflow Vulnerabilities
T-144: FreeBSD 'telnetd' Daemon Remote Code Execution Vulnerability
T-145: Linux Kernel 'sock.c' SO_BSDCOMPAT Option Information Disclosure Vulnerability
T-146: BlackBerry Attachment Service PDF Distiller Multiple Unspecified Security Vulnerabilities
T-147: OpenSSL 'dtls1_retrieve_buffered_fragment()' DTLS Packet Denial of Service Vulnerability
T-148: Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability
T-149: Apache 'Options' and 'AllowOverride' Security Directives Vulnerability
T-150: VMware Hosted products and ESX and ESXi security issues
T-151: Microsoft Windows Desktop Wall Paper System Parameter Local Denial Of Service Vulnerability
T-152: Apple QuickTime JP2 Image Handling Heap Buffer Overflow Vulnerability
T-153: Apache Tomcat Form Authentication Existing/Non-Existing Username Enumeration Weakness
T-154: Sun Solaris Kerberos Credential Management Security Bypass Vulnerability
T-155: OpenSSL 'ChangeCipherSpec' DTLS Packet Denial of Service Vulnerability
T-156: GNOME Evolution S/MIME Email Signature Verification Vulnerability
T-157: Apple Safari Prior to 4.0 Multiple Security Vulnerabilities
T-158: HP OpenView Network Node Manager SNMP and MIB Unspecified Remote Code Execution Vulnerability
T-159: Adobe Reader and Acrobat 9.1.1 and Prior Multiple Remote Vulnerabilities
T-160: Microsoft Windows Print Spooler 'EnumeratePrintShares()' Remote Stack Buffer Overflow Vulnerability
T-161: Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2009-24 through -32 Multiple Remote Vulnerabilities
T-162: Drupal Views Module Multiple Security Bypass and HTML Injection Vulnerabilities
T-163: Linux Kernel NFS 'MAY_EXEC' Security Bypass Vulnerability
T-164: Sun Java Runtime Environment Aqua Look and Feel Privilege Escalation Vulnerability
T-165: Microsoft Active Directory Encoded LDAP String Memory Corruption Remote Code Execution Vulnerability
T-166: FreeBSD Direct Pipe Writes Information Disclosure Vulnerability
T-167: OpenSSL Multiple Vulnerabilities
T-168: IrfanView 'TIFF' File Handling Remote Integer Overflow Vulnerability
T-169: Adobe Shockwave Player Unspecified Security Vulnerability
T-170: Cisco Physical Access Gateway Malformed Packet Remote Denial of Service Vulnerability
T-171: Samba Format String And Security Bypass Vulnerabilities
T-172: Linux Kernel 'e1000/e1000_main.c' Remote Denial of Service Vulnerability
T-173: phpMyAdmin 'db' Parameter Cross Site Scripting Vulnerability
T-174: MIT Kerberos 'asn1_decode_generaltime()' Uninitialized Pointer Memory Corruption Vulnerability
T-175: Pidgin OSCAR Protocol Web Message Denial of Service Vulnerability
T-176: Sun Kernel udp(7p) Denial of Service Vulnerability
T-177: FCKeditor input sanitization errors
T-178: Microsoft Windows 'msvidctl.dll' ActiveX Control Unspecified Remote Memory Corruption Vulnerability
T-179: Ubuntu Linux TIFF Image Library Vulnerability
T-180: Citrix XenCenterWeb Multiple Input Validation Vulnerabilities
T-181: Microsoft Windows 'MPEG2TuneRequest' ActiveX Control Vulnerability
T-182: Nagios 'statuswml.cgi' Remote Arbitrary Shell Command Injection Vulnerability
T-183: Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution
T-184: Microsoft Monthly Updates
T-185: Two Remote Code Execution Vulnerabilities in Firefox
T-186: Mozilla Firefox 3.5 'Tracemonkey' Component Remote Code Execution Vulnerability
T-187: Security Vulnerability in Solaris NFSv4 Kernel Module May Panic an NFSv4 Client System
T-188: Linked XSS Vulnerability found in Oracle BEA Weblogic Server
T-189: Directory Traversal Vulnerability in the Administration Interface in Cisco Customer Response Solutions
T-190: Buffer Overflow in NASA Common Data Format (CDF) Library
T-191: Vulnerability in Adobe Acrobat, Reader, and Flash Player
T-192: Microsoft Office Web Components ActiveX Control 'msDataSourceObject' is vulnerable to Code Execution
T-193: Sun Solaris Auditing Extended File Attributes (fsattr(5)) Local Denial Of Service Vulnerability
T-194: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
T-195: Remote Jail Breakout Vulnerability via Symlink Traversal in NcFTPd
T-196: Critical Cumulative Security Update for Internet Explorer
T-197: ISC BIND Denial of Service Vulnerability
T-198: Squid Multiple Remote Denial of Service Vulnerabilities
T-199: Mozilla Firefox NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
T-200: Absolute Software Computrace LoJack for Laptops Security Bypass Vulnerability
T-201: Mozilla Firefox and Seamonkey Regular Expression Parsing Heap Buffer Overflow Vulnerability
T-202: Mozilla Firefox Error Page Address Bar URL Spoofing Vulnerability
T-203: Sun Java Runtime Environment Audio System Privilege Escalation Vulnerability
T-204: Apple Mac OS X 2009-003 Multiple Security Vulnerabilities
T-205: Mozilla Firefox Flash Player Unloading Remote Code Execution Vulnerability
T-206: Apache Tomcat 'RequestDispatcher' Information Disclosure Vulnerability
T-207: Microsoft Patch Tuesday Reminder
T-208: Apple Safari Code Execution and Security Bypass Vulnerabilities
T-209: NTP 'ntpq' Stack Buffer Overflow Vulnerability
T-210: Mozilla Firefox 3.5.1/3.0.12 Multiple Memory Corruption Vulnerabilities
T-211: Memcached Multiple Heap Based Buffer Overflow Vulnerability
T-212: Linux Kernel 'sock_sendpage()' NULL Pointer Dereference Vulnerability
T-213: Cisco IOS XR Software Border Gateway Protocol Vulnerability
T-214: Solaris Kernel Filesystem and Virtual Memory Subsystems Vulnerability
T-215: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability
T-216: Multiple Vulnerabilities With Adobe Flash Player, Adobe Reader and Acrobat
T-217: Linux Kernel 'udp_sendmsg()' MSG_MORE Flag Local Privilege Escalation Vulnerability
T-218: Cisco Lightweight Access Point Over-the-Air Provisioning Manipulation Vulnerability
T-219: Sun Virtual Desktop Infrastructure (VDI) Secure LDAP Vulnerability
T-220: Sun Java System Access Manager Debug Files Local Information Disclosure Vulnerability
T-221: Multiple Browser HTTP Resource in HTTPS Context Security Bypass Vulnerability
T-222: Microsoft IIS FTPd NLST Remote Buffer Overflow Vulnerability
T-223: Autonomy KeyView Module Excel Document Processing Buffer Overflow Vulnerability
T-224: OpenOffice Word Document Table Parsing Multiple Heap Based Buffer Overflow Vulnerabilities
T-225: Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability
T-226: Debian devscripts 'uscan' Input Validation Vulnerability
T-227: Microsoft Patch Tuesday Reminder
T-228: Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()' Remote Code Execution Vulnerability
T-229: Mozilla Firefox MFSA 2009-47, -48, -49, -50, -51 Multiple Vulnerabilities
T-230: Solaris Heap Overflow Vulnerability in w(1) Utility
T-231: HP StorageWorks Remote Management Interface Vulnerability
T-232: VMware Hosted Products VMSA-2009-0005 Multiple Remote Vulnerabilities
T-233: Wireshark 1.2.1 Multiple Vulnerabilities
T-234: Linux Kernel 'perf_counter_open()' Local Buffer Overflow Vulnerability
T-235: IBM Lotus Notes RSS Reader Widget HTML Injection Vulnerability
T-236: OpenSSL 'dtls1_retrieve_buffered_fragment()' DTLS Packet Denial of Service Vulnerability
T-237: Squid Web Proxy Cache Authentication Header Parsing Remote Denial of Service Vulnerability
T-238: Cisco Unified Communications Manager SIP Message Denial of Service Vulnerability
T-239: Linux Kernel KVM 'kvm_emulate_hypercall()' Local Denial of Service Vulnerability
T-240: OpenSSL 'dtls1_retrieve_buffered_fragment()' DTLS Remote Denial of Service Vulnerability
T-241: Blackberry OS NULL Character Flaw in Common Name Field Lets Remote Users Spoof Certficates
T-242: Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation Vulnerability
T-243: Red Hat Enterprise Linux OpenSSH 'ChrootDirectory' Option Local Privilege Escalation Vulnerability
T-244: Solaris IP(7P) Module and STREAMS Framework Denial of Service Vulnerabilities
T-245: VMware Fusion vmx86 Kernel Extension Bugs Let Local Host OS Users Gain Elevated Privileges and Deny Service on the Host
T-246: IBM AIX 'nfs_portmon' Authentication Bypass Vulnerability
T-247: Multiple HP JetDirect Printers Multiple Cross Site Scripting Vulnerabilities
T-248: Adobe Acrobat Reader Remote Code Execution Vulnerability
T-249: Sun VirtualBox VBoxNetAdpCtl Configuration Tool Local Privilege Escalation Vulnerability
T-250: Microsoft Patch Tuesday Reminder
T-251: Linux Kernel 'clear_child_tid()' Local Denial of Service Vulnerability
T-252: Xpdf Multiple Integer Overflow Vulnerabilities
T-253: Cisco Unified Presence Denial of Service Vulnerabilities
T-254: Cisco IOS Software Authentication Proxy Vulnerability
T-255: Oracle Critical Patch Update Advisory
T-256: Pidgin OSCAR Plugin Invalid Memory Access Denial Of Service Vulnerability
T-257: MapServer Multiple Security Vulnerabilities
T-258: Multiple Security Vulnerabilities in Adobe Reader and Acrobat
T-259: Linux Kernel 'kernel/signal.c' Local Information Disclosure Vulnerability
T-260: Mozilla Firefox and SeaMonkey MFSA 2009-52 through -64 Multiple Vulnerabilities
T-261: Solaris Trusted Extensions Weakness May Let Users Gain Elevated Privileges
T-262: Drupal Workflow Module Multiple HTML Injection Vulnerabilities
T-263: KDE Multiple Input Validation Vulnerabilities
T-264: VMware Products Directory Traversal Vulnerability
T-265: BlackBerry Desktop Manager ActiveX Control Remote Code Execution Vulnerability
T-266: Sun Solaris SCTP 'sctp(7P)' and SDP 'sdp(7D)' Sockets Local Denial Of Service Vulnerability
T-267: Buffer and Integer Overflow Vulnerabilities in the Java Runtime Environment
T-268: HP Power Manager Management Web Server Login Remote Code Execution Vulnerability
T-269: Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
T-270: Citrix Online Plug-ins Lets Remote Users Spoof SSL Endpoints
T-271: McAfee IntruShield Network Security Manager Permits Session Hijacking Attacks
T-272: Google Chrome prior to 3.0.195.32 Multiple Security Vulnerabilities
T-273: Sun xVM VirtualBox Guest Additions Kernel Memory Consumption Flaw Lets Local Users Deny Service
T-274: HP OpenView Network Node Manager Remote Denial of Service Vulnerability
T-275: Sun Java Runtime Environment Font Processing Buffer Overflow Vulnerability
U.S. Department of Energy | 1000 Independence Ave., SW | Washington, DC 20585
1-800-dial-DOE | f/202-586-4403
