SuSE 10 Security Update : XMMS (ZYPP Patch Number 3075)

Two integer overflows when processing BMP skin images potentially allows attackers to execute arbitrary code via specially crafted files. CVE-2007-0653 / CVE-2007-0654 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Ubuntu 5.10 / 6.06 LTS / 6.10 : xmms vulnerabilities (USN-445-1)

Sven Krewitt of Secunia Research discovered that XMMS did not correctly handle BMP images when loading GUI skins. If a user were tricked into loading a specially crafted skin, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the...

openSUSE 10 Security Update : xmms (xmms-3073)

Two integer overflows when processing BMP skin images potentially allows attackers to execute arbitrary code via specially crafted files CVE-2007-0653,CVE-2007-0654. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Debian DSA-1277-1 : XMMS - several vulnerabilities

Multiple errors have been found in the skin handling routines in xmms, the X Multimedia System. These vulnerabilities could allow an attacker to run arbitrary code as the user running xmms by inducing the victim to load specially crafted interface skin files. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 1277-1] New XMMS packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1277-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 04, 2007 - ------------------------------------------------------------------------ Package : xmms Vulnerability :...

Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities

====================================================================== Secunia Research 21/03/2007 - XMMS Integer Overflow and Underflow Vulnerabilities - ===================================================================== Table of Contents Affected...

CVE-2007-0654

XMMS 1.2.10 contains an integer underflow in the BMP skin header processing, leading to a stack-based buffer overflow that enables remote code execution. Affected files: the skin bitmap handling code within XMMS; impact includes arbitrary code execution on the affected system. Public advisories a...

CVE-2006-0654

check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies...

CVE-2006-0654

CVE-2006-0654 affects Hinton Design phpht Topsites 1.3 where check.php fails to validate passwords when cookies are used, enabling remote attackers to bypass authentication via unspecified cookies. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector and low complexit...

CVE-2006-0654

check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies...

CVE-2005-0654

GIMP affected: gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4. Vulnerability: image descriptor fields height or width set to zero can cause an application crash (DoS). Exploitation: described as remote attacker or local user impact. No remediation details provided in the supplied documents;...

Debian DSA-373-1 : autorespond - buffer overflow

Christian Jaeger discovered a buffer overflow in autorespond, an email autoresponder used with qmail. This vulnerability could potentially be exploited by a remote attacker to gain the privileges of a user who has configured qmail to forward messages to autorespond. This vulnerability is currentl...

CVE-2004-0654

Unknown vulnerability in the Basic Security Module BSM, when configured to audit either the Administrative ad or the System-Wide Administration as audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service kernel panic...

CVE-2004-0654

Unknown vulnerability in the Basic Security Module BSM, when configured to audit either the Administrative ad or the System-Wide Administration as audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service kernel panic...

CVE-2004-0654

Technical details about CVE-2004-0654 are not publicly available in the supplied documents; no concrete affected product/version, root cause, or remediation are provided. Monitor for updates from official sources.

CVE-2003-0654

Buffer overflow in autorespond may allow remote attackers to execute arbitrary code as the autorespond user via qmail...

CVE-2003-0654

CVE-2003-0654 describes a buffer overflow in autorespond (an email autoresponder used with qmail). The flaw could allow remote attackers to execute arbitrary code as the autorespond user via qmail. Public sources (NVD, Debian DSA-373-1) document this as a remote vulnerability with a base CVSS v2 ...

CVE-2002-0654

Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via 1 a request for a .var file, which leaks the pathname in the resulting error message, or 2 via an error message that occurs when a script child process cannot be invoked...

CVE-2002-0654

Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via 1 a request for a .var file, which leaks the pathname in the resulting error message, or 2 via an error message that occurs when a script child process cannot be invoked...

CVE-2002-0654

CVE-2002-0654 affects Apache HTTP Server 2.0.x (up to 2.0.39) on Windows, OS/2 and NetWare. The vulnerability allows remote attackers to disclose the server’s full path by triggering errors from (1) a request for a .var file or (2) a failure when invoking a CGI child process, causing error messag...