SuSE9 Security Update : mod_python (YOU Patch Number 9905)

This update fixes an information leak in modpython when using the publisher handle. Due to the bug it is possible to get access to published objects remotely without permission. CVE-2005-0088 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : zlib (YOU Patch Number 10347)

The previous zlib update for CVE-2005-2096 fixed a flaw in zlib that could allow a carefully crafted compressed stream to crash an application. While the original patch corrected the reported overflow, Markus Oberhumer discovered additional ways a stream could trigger an overflow. This security...

SuSE9 Security Update : bzip2 (YOU Patch Number 10057)

bzip2 could crash or run into an endless loop when decompressing certain specially crafted archives. This problem has been fixed. CVE-2005-1260 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : perl-Convert-UUlib (YOU Patch Number 10044)

This update fixes a buffer overflow that could allow an attacker to execute arbitrary code. CVE-2005-1349 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41071;...

SuSE9 Security Update : gdk-pixbuf (YOU Patch Number 10558)

This update fixes the following security problem: a heap overflow in the XPM reader allowed attackers to execute arbitrary code via specially crafted XPM images. CVE-2005-3186, CVE-2005-2975, CVE-2005-2976 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

SuSE9 Security Update : perl-Net-Server (YOU Patch Number 10270)

A format string problem was found in the logging routines of the perl-Net-Server perl module collection. This could lead to a remote attacker being able to crash a server using the perl-Net-Server module. This is tracked by the Mitre CVE ID CVE-2005-1127. %NASLMINLEVEL 70300 C Tenable Network...

SuSE9 Security Update : freeswan (YOU Patch Number 10753)

This update fixes the following security problem : - specially crafted packets could crash pluto as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. CVE-2005-3671 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : libungif (YOU Patch Number 10556)

This update fixes the following security issues : - specially crafted GIF files could crash applications. CVE-2005-2974 - specially crafted GIF files could overwrite memory which potentially allowed to execute arbitrary code. CVE-2005-3350 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE9 Security Update : netpbm (YOU Patch Number 11701)

This update fixes a buffer overflow in the RGBA-palette code. The bug can be abused to trigger a denial-or-service attack by feeding untrusted data to 'pnmtopng -alpha' maybe via a remote service like a CGI, mail user agent, etc. The execution of arbitrary code is theoretically possible but...

SuSE9 Security Update : perl-DBI (YOU Patch Number 9838)

This update fixes insecure temp. file handling. CVE-2005-0077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41346; scriptversion"1.9";...

SuSE9 Security Update : gedit (YOU Patch Number 10253)

Gedit had a format string bug in the filename handling, potentially allowing an attacker to execute arbitrary code. This bug has been fixed. CVE-2005-1686 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : Apache (YOU Patch Number 11489)

This update includes a missed security update for Apache 1.3. The problem is already fixed for our Apache2 packages. - modimap: Escape untrusted Referer header before outputting in HTML to avoid potential cross-site scripting. A change was also made to apescapehtml so we escape quotes...

SuSE9 Security Update : libgda (YOU Patch Number 10554)

This update fixes the following security problem: libgda contained two format string bugs in logging routines. Those bugs could potentially indirectly lead to arbitrary code execution via applications that link against libgda and supply data to libgda. CVE-2005-2958 %NASLMINLEVEL 70300 C Tenable...

[DSECRG-09-055] OSSIM 2.1 - Multiple security vulnerabilities

OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1 and may be 2.1.1 Vendor URL:...

BPHolidayLettings 1.0 - Blind SQL Injection

BPHolidayLettings 1.0 - Blind SQL Injection x========================================================================================================================================x | AntiSecuritydotorg |...

BPHolidayLettings 1.0 Blind SQL Injection

Exploit for unknown platform in category web applications ========================================= BPHolidayLettings 1.0 Blind SQL Injection =========================================...

BPLawyerCaseDocuments - SQL Injection

BPLawyerCaseDocuments - SQL Injection x========================================================================================================================================x | AntiSecuritydotorg |...

BPHolidayLettings SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

BPHolidayLettings 1.0 - Blind SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

Gentoo Security Advisory GLSA 200909-15 (lynx)

The remote host is missing updates announced in advisory GLSA 200909-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...