DSA-1340-1 clamav - null pointer dereference

Bulletin has no description...

DSA-1339-1 iceape - several

Bulletin has no description...

mkportal-sql.txt

?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stable release Currently implemented:...

MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit

No description provided by source. ?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stabl...

Debian DSA-1324-1 : hiki - missing input sanitising

Kazuhiro Nishiyama found a vulnerability in hiki, a Wiki engine written in Ruby, which could allow a remote attacker to delete arbitrary files which are writable to the Hiki user, via a specially crafted session parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

DSA-1326-1 fireflier

Bulletin has no description...

DSA-1324-1 hiki

Bulletin has no description...

DSA-1320-1 clamav

Bulletin has no description...

Debian DSA-1309-1 : postgresql-8.1 - programming error

It was discovered that the PostgreSQL database performs insufficient validation of variables passed to privileged SQL statements, so called'security definers', which could lead to SQL privilege escalation. The oldstable distribution sarge doesn't contain PostgreSQL 8.1. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 1310-1] New libexif packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1310-1 [email protected] http://www.debian.org/security/ Steve Kemp June 16, 2007 - ------------------------------------------------------------------------ Package : libexif 0.6.13-5etch1...

Debian DSA-1305-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1558 Gatan Leurent discovered a cryptographical weakness in APOP...

Re: [Full-disclosure] screen 4.0.3 local Authentication Bypass

-----Original Message----- Subject: Re: Full-disclosure screen 4.0.3 local Authentication Bypass Verified on OpenBSD I'm not seeing a 'Getpass error' message on 4.1-STABLE current, but there does seem to be a problem with locking and reattaching: $ screen space $ echo "This is the locked screen"...

Authorization

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

CVE-2007-2849

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

[SECURITY] [DSA 1291-3] New samba packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1291-3 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 20th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...

DSA-1292-1 qt4-x11

Bulletin has no description...

DSA-1288-1 pptpd

Bulletin has no description...

DSA-1284-1 qemu

Bulletin has no description...

tomcat -- multiple vulnerabilities

Apache Project reports: The Apache Tomcat team is proud to announce the immediate availability of Tomcat 4.1.36 stable. This build contains numerous library updates, A small number of bug fixes and two important security fixes...