Debian DSA-574-1 : cabextract - missing directory sanitising

The upstream developers discovered a problem in cabextract, a tool to extract cabinet files. The program was able to overwrite files in upper directories. This could lead an attacker to overwrite arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

Debian DSA-584-1 : dhcp - format string vulnerability

'infamous41md' noticed that the log functions in dhcp 2.x, which is still distributed in the stable Debian release, contained pass parameters to function that use format strings. One use seems to be exploitable in connection with a malicious DNS server. %NASLMINLEVEL 70300 C Tenable Network...

Debian DSA-588-1 : gzip - insecure temporary files

Trustix developers discovered insecure temporary file creation in supplemental scripts in the gzip package which may allow local users to overwrite files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Debian DSA-578-1 : mpg123 - buffer overflow

Carlos Barros has discovered a buffer overflow in the HTTP authentication routine of mpg123, a popular but non-free MPEG layer 1/2/3 audio player. If a user opened a malicious playlist or URL, an attacker might execute arbitrary code with the rights of the calling user. %NASLMINLEVEL 70300 C...

Debian DSA-600-1 : samba - arbitrary file access

A vulnerability has been discovered in samba, a commonly used LanManager-like file and printer server for Unix. A remote attacker may be able to gain access to files which exist outside of the share's defined path. Such files must still be readable by the account used for the connection, though...

Debian DSA-560-1 : lesstif1-1 - integer and stack overflows

Chris Evans discovered several stack and integer overflows in the libXpm library which is included in LessTif. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-560. The text itself is...

CVE-2004-1010

CVE-2004-1010 maps to a buffer overflow in Info-Zip zip (v2.3 and possibly earlier) when recursively creating archives with very long pathnames, enabling remote code execution via a crafted ZIP. Connected advisories (Ubuntu USN-18-1, Debian DSA-624-1, Gentoo GLSA 200411-16, FreeBSD/OpenVAS entrie...

Mandrake Linux Security Advisory : ruby (MDKSA-2004:128)

Andres Salomon noticed a problem with the CGI session management in Ruby. The CGI:Session's FileStore implementations store session information in an insecure manner by just creating files and ignoring permission issues CVE-2004-0755. The ruby developers have corrected a problem in the ruby CGI...

GLSA-200411-10 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200411-10 Gallery: XSS vulnerability Jim Paris has discovered a cross-site scripting vulnerability in Gallery. Impact : By sending a carefully crafted URL, an attacker can inject and execute script code in the victim's browser...

Mandrake Linux Security Advisory : iptables (MDKSA-2004:125)

Faheem Mitha discovered that the iptables tool would not always load the required modules on its own as it should have, which could in turn lead to firewall rules not being loaded on system startup in some cases. The updated packages are patched to prevent this problem. %NASLMINLEVEL 70300 C...

CVE-2004-0955

CVE-2004-0955 is rejected/not used; reference CVE-2004-0599 instead.

CVE-2004-1003

Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file...

CVE-2004-1007

The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service application crash via mail headers that cause a line feed LF to be replaced by a null byte that is written to an incorrect memory address...

CVE-2004-1007

The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service application crash via mail headers that cause a line feed LF to be replaced by a null byte that is written to an incorrect memory address...

CVE-2004-1001

Unknown vulnerability in the passwdcheck function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pamchauthtok function call is not properly handled...

CVE-2004-0942

CVE-2004-0942 affects Apache 2.0.52 and earlier. A remote attacker can trigger a denial of service by sending an HTTP GET with a MIME header containing many lines of whitespace, causing CPU/memory consumption. Public references show patches and advisories across platforms (e.g., ALT Linux package...

CVE-2004-1002

CVE-2004-1002 affects pppd (cbcp.c) where an integer underflow on a CBCP packet with an invalid length enables a remote attacker to crash the daemon (DoS) for ppp 2.4.1. Affected component: pppd/CBCCP handling; root cause: integer underflow leading to memory access violation. Impact: daemon crash...

CVE-2004-1007

CVE-2004-1007 concerns bogofilter’s quoted-printable decoder, affecting versions 0.17.4 through 0.92.7. The vulnerability allows remote attackers to cause a denial of service (application crash) by crafting mail headers in which a line feed (LF) is replaced by a null byte that is written to an in...

CVE-2004-1003

This CVE affects Trend Micro ScanMail for Domino. The vulnerability concerns the nsf-based component smency.nsf, enabling a remote attacker to read sensitive files and potentially disable antivirus protection. Multiple sources describe the issue as an information-disclosure flaw that could expose...

CVE-2004-0942

Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service CPU consumption via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters...