Debian DSA-442-1 : linux-kernel-2.4.17-s390 - several vulnerabilities

Several security related problems have been fixed in the Linux kernel 2.4.17 used for the S/390 architecture, mostly by backporting fixes from 2.4.18 and incorporating recent security fixes. The corrections are listed below with the identification from the Common Vulnerabilities and Exposures CVE...

CVE-2002-1179

Buffer overflow in the S/MIME Parsing capability of Microsoft Outlook Express 5.5 and 6.0 is triggered when a user views or previews a digitally signed email with a long From address, allowing potential remote code execution. The root cause is an overflow in the S/MIME parsing path, leading to ar...

CVE-2002-1179: Undefined Security Weakness

Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message...

WU-FTPD S/KEY Authentication ftpd.c skey_challenge Function Remote Overflow

This version of WU-FTPD contains a remote overflow if s/key support is enabled. The skeychallenge function fails to perform bounds checking on the name variable resulting in a buffer overflow. With a specially crafted request, an attacker can execute arbitrary code resulting in a loss of integrit...

Lotus Notes R5 S/MIME Message Modification Warning Failure

Binary data 1304.prm...

Microsoft Outlook Express S/MIME Buffer Overflow Vulnerability

Binary data 1291.prm...

A-A-S Server Detection

Binary data 5022.prm...

RHEL 3 : kernel (RHSA-2004:066)

Updated kernel packages that fix a security vulnerability that may allow local users to gain root privileges are now available. These packages also resolve other minor issues. The Linux kernel handles the basic functions of the operating system. Paul Starzetz discovered a flaw in return value...

RHEL 2.1 / 3 : mozilla (RHSA-2004:110)

Updated Mozilla packages that fix vulnerabilities in S/MIME parsing as well as other issues and bugs are now available. Mozilla is a Web browser and mail reader, designed for standards compliance, performance and portability. Network Security Services NSS is a set of libraries designed to support...

RHEL 2.1 : wu-ftpd (RHSA-2004:096)

An updated wu-ftpd package that fixes two security issues is now available. The wu-ftpd package contains the Washington University FTP File Transfer Protocol server daemon. FTP is a method of transferring files between machines. Glenn Stewart discovered a flaw in wu-ftpd. When configured with...

Important: Red Hat Security Advisory: : Updated Mozilla packages fix security issues

Updated Mozilla packages that fix vulnerabilities in S/MIME parsing as well as other issues and bugs are now available. Mozilla is a Web browser and mail reader, designed for standards compliance, performance and portability. Network Security Services NSS is a set of libraries designed to support...

multiple wu-ftpd bugs

Local user can bypass root directory protection, buffer overflow on S/Key authentication...

Important: Red Hat Security Advisory: wu-ftpd security update

An updated wu-ftpd package that fixes two security issues is now available. The wu-ftpd package contains the Washington University FTP File Transfer Protocol server daemon. FTP is a method of transferring files between machines. Glenn Stewart discovered a flaw in wu-ftpd. When configured with...

DSA-457 wu-ftpd - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 442-1] New Linux 2.4.17 packages fix local root exploits and more (s390)

-------------------------------------------------------------------------- Debian Security Advisory DSA 442-1 [email protected] http://www.debian.org/security/ Martin Schulze February 19th, 2004 http://www.debian.org/security/faq -...

DSA-442 linux-kernel-2.4.17-s390 - several vulnerabilities

Bulletin has no description...

[Full-Disclosure] CactuSoft CactuShop 5.0 Lite shopping cart software backdoor

S-Quadra Advisory 2004-02-06 Topic: CactuSoft CactuShop 5.0 Lite shopping cart software backdoor Severity: High Vendor URL: http://www.cactushop.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040206.txt Release date: 06 Feb 2004 1. DESCRIPTION CactuShop is an ASP application for runni...

[Full-Disclosure] QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities

S-Quadra Advisory 2004-01-23 Topic: QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities Severity: High Vendor URL: http://www.quadcomm.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040123.txt Release date: 23 Jan 2004 1. DESCRIPTION Q-Shop is a shopping cart...

CVE-2003-1279

S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on 1 /tmp/F8499 by Sqpe, 2 /tmp/PRINT.$$.out by PRINT, 3 /tmp/SUBST$PID.TXT and /tmp/ed.cmds$PID by mustfix.hlinks, 4 /tmp/file.1 and /tmp/file.2 by sasget, 5 /tmp/file.1 by sasvars, an...

CVE-2003-0564

Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions S/MIME protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as...