109 matches found
[SECURITY] [DSA 986-1] New gnutls11 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 986-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 985-1] New libtasn1-2 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 985-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 985-1] New libtasn1-2 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 985-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2006 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 986-1] New gnutls11 packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 986-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2006 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 985-1] New libtasn1-2 packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 985-1 [email protected] http://www.debian.org/security/ Martin Schulze March 6th, 2006 http://www.debian.org/security/faq -...
Fedora Core 4 : gnutls-1.0.25-2.FC4 (2006-107)
Fri Feb 10 2006 Martin Stransky 1.0.25-2.FC4 - fix for CVE-2006-0645 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
RHEL 4 : gnutls (RHSA-2006:0207)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0207 advisory. - - libtasn1 buffer overflow CVE-2006-0645 Note that Nessus has not tested for this issue but has instead relied only on the application's...
gnutls security update
CentOS Errata and Security Advisory CESA-2006:0207 Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The GNU TLS Library provides support for...
Important: Red Hat Security Advisory: gnutls security update
Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The GNU TLS Library provides support for cryptographic algorithms and protocols such as TLS. GN...
CVE-2006-0645
Tiny ASN.1 Library libtasn1 before 0.2.18, as used by 1 GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and 2 GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test...
CVE-2006-0645
The CVE-2006-0645 entry concerns Tiny ASN.1 Library (libtasn1) before 0.2.18, used by GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and by GNU Shishi. The issue is an out-of-bounds access in the DER decoder caused by invalid input, which can crash the DER decoder and possibly allow arbitrary...
CVE-2005-0645
Cross-site scripting XSS vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the 1 CLIENT-IP or 2 X-FORWARDED-FOR header in an HTTP POST request to shownews.php...
Debian DSA-550-1 : wv - buffer overflow
iDEFENSE discovered a buffer overflow in the wv library, used to convert and preview Microsoft Word documents. An attacker could create a specially crafted document that could lead wvHtml to execute arbitrary code on the victims machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2004-0645
Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...
CVE-2004-0645
Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...
CVE-2004-0645
Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...
CVE-2004-0645
CVE-2004-0645 affects the wvWare library (wvHandleDateTimePicture) used by wv/Abiword, with a buffer overflow in 0.7.4–0.7.6 and 1.0.0 that enables remote code execution via a long DateTime field. Public advisories (Debian DSA-579-1, CAN-2004-0645, Gentoo GLSA 200407-11, OpenVAS entries) confirm ...
CVE-2004-0645
Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...