Debian Security Advisory DSA 1476-1 (pulseaudio)

The remote host is missing an update to pulseaudio announced via advisory DSA 1476-1. OpenVAS Vulnerability Test $Id: deb14761.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1476-1 pulseaudio Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1476-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1476-1 : pulseaudio - programming error

Marcus Meissner discovered that the PulseAudio sound server performed insufficient checks when dropping privileges, which could lead to local privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debia...

[SECURITY] [DSA 1476-1] New pulseaudio packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1476-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2008 http://www.debian.org/security/faq -...

Fedora 8 : pulseaudio-0.9.8-5.fc8 (2008-0963)

Wed Jan 23 2008 Lubomir Kundrak 0.9.8-5 - Fix CVE-2008-0008 security issue 425481 - Sun Jan 13 2008 Lubomir Kundrak 0.9.8-4.1 - Actually add content to pulseaudio-0.9.8-create-dot-pulse.patch - Make the Source0 tag point to URL instead of a local file - Drop the nochown patch; it's not applied at...

Fedora 7 : pulseaudio-0.9.6-2.fc7.1 (2008-0994)

Wed Jan 23 2008 Lubomir Kundrak 0.9.6-2.1 - Fix CVE-2008-0008 security issue 425481 - Tue May 29 2007 Pierre Ossman 0.9.6-2 - Add libatomicops-devel as a build requirement. - Tue May 29 2007 Pierre Ossman 0.9.6-1 - Upgrade to 0.9.6. Note that Tenable Network Security has extracted the preceding...

Security fix for the ALT Linux 9 package libxml2 version 1:2.6.31-alt1

Jan. 14, 2008 Alexey Tourbin 1:2.6.31-alt1 - 2.6.30+svn3661 - 2.6.31 fixes CVE-2007-6284...

Security fix for the ALT Linux 5 package libxml2 version 1:2.6.31-alt1

Jan. 14, 2008 Alexey Tourbin 1:2.6.31-alt1 - 2.6.30+svn3661 - 2.6.31 fixes CVE-2007-6284...

MS Windows Media Player 9 Plugin Overflow Exploit (MS06-006) (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

Mozilla Firefox 1.5 location.QueryInterface() Code Execution (osx)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

MS Internet Explorer (createTextRang) Remote Exploit (meta update)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...

Security fix for the ALT Linux 5 package samba version 3.0.28-alt1

Dec. 10, 2007 Alexander Bokovoy 3.0.28-alt1 - Fixed: + CVE-2007-6015: == Specifically crafted GETDC mailslot requests == can trigger a boundary error in the domain == controller GETDC mail slot support which == can be remotely exploited to execute arbitrary == code. + fix error path in local...

Security fix for the ALT Linux 5 package samba version 3.0.27-alt1

Nov. 15, 2007 Alexander Bokovoy 3.0.27-alt1 - Security release 3.0.27: + CVS-2007-4572 Stack buffer overflow in nmbd's logon request processing. + CVE-2007-5398 Remote code execution in Samba's WINS server daemon nmbd when processing name registration followed name query requests. - Updated set o...

Ubuntu 6.06 LTS / 6.10 / 7.04 : apache2 vulnerabilities (USN-499-1)

Stefan Esser discovered that modstatus did not force a character set, which could result in browsers becoming vulnerable to XSS attacks when processing the output. If a user were tricked into viewing server status output during a crafted server request, a remote attacker could exploit this to...

Ubuntu 7.04 : pulseaudio vulnerability (USN-465-1)

Luigi Auriemma discovered multiple flaws in pulseaudio's network processing code. If an unauthenticated attacker sent specially crafted requests to the pulseaudio daemon, it would crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description...

Ubuntu 5.04 / 5.10 / 6.06 LTS : apache2 vulnerability (USN-328-1)

Mark Dowd discovered an off-by-one buffer overflow in the modrewrite module's ldap scheme handling. On systems which activate 'RewriteEngine on', a remote attacker could exploit certain rewrite rules to crash Apache, or potentially even execute arbitrary code this has not been verified...

Security fix for the ALT Linux 5 package samba version 3.0.26a-alt1

Sept. 11, 2007 Alexander Bokovoy 3.0.26a-alt1 - Bugfix release - Includes security fix for CVE-2007-4138...

Security fix for the ALT Linux 5 package samba version 3.0.25-alt1

May 14, 2007 Alexander Bokovoy 3.0.25-alt1 - New release - Security fixes for CVE-2007-2444, CVE-2007-2446, and CVE-2007-2447: + CVE-2007-2444 Versions: Samba 3.0.23d - 3.0.25pre2 Local SID/Name translation bug can result in user privilege elevation + CVE-2007-2446 Versions: Samba 3.0.0 - 3.0.24...

Debian DSA-1131-1 : apache - buffer overflow

Mark Dowd discovered a buffer overflow in the modrewrite component of apache, a versatile high-performance HTTP server. In some situations a remote attacker could exploit this to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Debian DSA-1132-1 : apache2 - buffer overflow

Mark Dowd discovered a buffer overflow in the modrewrite component of apache, a versatile high-performance HTTP server. In some situations a remote attacker could exploit this to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...