ethereal security update

CentOS Errata and Security Advisory CESA-2005:809-01 Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network...

RHEL 2.1 / 3 / 4 : ethereal (RHSA-2005:809)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ethereal package is a program for monitoring network traffic. A number of security flaws have been...

RHEL 2.1 : fetchmail (RHSA-2005:823)

Updated fetchmail packages that fix insecure configuration file creation is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Fetchmail is a remote mail retrieval and forwarding utility. A bug was found in the way the fetchmailconf...

[Full-disclosure] [SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 877-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

fetchmail security announcement 2005-02 (CVE-2005-3088)

fetchmail-SA-2005-02: security announcement Topic: password exposure in fetchmailconf Author: Matthias Andree Version: 1.02 Announced: 2005-10-21 Type: insecure creation of file Impact: passwords are written to a world-readable file Danger: medium Credits: Thomas Wolff, Miloslav Trmac for pointin...

RHEL 4 : pam (RHSA-2005:805)

An updated pam package that fixes a security weakness is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. PAM Pluggable Authentication Modules is a system security tool that allows system administrators t...

[SECURITY] [DSA 876-1] New lynx-ssl packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 876-1 [email protected] http://www.debian.org/security/ Martin Schulze October 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 876-1] New lynx-ssl packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 876-1 [email protected] http://www.debian.org/security/ Martin Schulze October 27th, 2005 http://www.debian.org/security/faq -...

DEBIAN-CVE-2005-3318

Buffer overflow in the chmdecompressblock function in CHM lib chmlib before 0.37, as used in products such as KchmViewer, allows attackers to execute arbitrary code, a different vulnerability than CVE-2005-2930...

CVE-2005-3336

SQL injection vulnerability in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-3323

docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality...

CVE-2005-3337

Multiple cross-site scripting XSS vulnerabilities in Mantis before 0.19.3 allow remote attackers to inject arbitrary web script or HTML via 1 unknown vectors involving Javascript and 2 mantis/viewallset.php...

CVE-2005-3248

Unspecified vulnerability in the X11 dissector in Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service divide-by-zero via unknown vectors...

CVE-2005-3330

The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...

CVE-2005-3331

viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2005-3331

viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

[SECURITY] [DSA 874-1] New lynx packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 874-1 [email protected] http://www.debian.org/security/ Martin Schulze October 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 874-1] New lynx packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 874-1 [email protected] http://www.debian.org/security/ Martin Schulze October 27th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3329

CVE-2005-3329 is an XSS vulnerability in RSA Authentication Agent for Web 5.3 and earlier that allows injection of script or HTML via the image parameter in a GetPic operation. Exploitation details in the sources show an advisory and PoC context around XSS in RSA’s web login flow; vendor fix is R...

CVE-2005-3249

CVE-2005-3249 affects Ethereal up to version 0.10.12 (vulnerability in the WSP dissector). The root cause described in connected MDKSA-2005:193-2 is that the WSP dissector could free an invalid pointer, enabling a remote attacker to cause a denial of service or memory corruption. A patched versio...