Dave Aitel

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 10 **Description** The issue concerns the handling of certificates in Mail, making it easier for man-in-the-middle attackers to discover mail credentials. **Recommendations** For versions prior to 10, update to version 10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Unicenter TNG version 2.4 **Description** The issue is related to multiple stack-based buffer overflows in Agent Common Services, specifically in `cam.exe` and `awservices.exe`. This allows remote attackers to execute arbitrary code. **Recommendations** For Unicenter TNG version 2.4, update to a version that includes the fix for the buffer overflows in `cam.exe` and `awservices.exe`. As a temporary workaround, consider restricting access to these executables to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Solaris versions 2.6 through 9 **Description** A directory traversal issue in the vfs getvfssw function allows local users to load arbitrary kernel modules via crafted system calls, including (1) mount or (2) sysfs system calls. **Recommendations** For Solaris versions 2.6 through 9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: RealNetworks Helix Universal Server version 9 RealSystem Server versions 7 and 8 RealServer G2 Description: A buffer overflow issue exists in the RTSP protocol parser for the View Source plug-in, which could allow remote attackers to execute arbitrary code. Recommendations: For RealNetworks Helix Universal Server version 9, update the View Source plug-in to a version that fixes the buffer overflow issue in the RTSP protocol parser. For RealSystem Server versions 7 and 8, update the View Source plug-in to a version that fixes the buffer overflow issue in the RTSP protocol parser. For RealServer G2, update the View Source plug-in to a version that fixes the buffer overflow issue in the RTSP protocol parser.