RHEL 2.1 : gdb (RHSA-2005:801)

An updated gdb package that fixes minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GDB, the GNU debugger, allows debugging of programs written in C, C++, and other languages by executing them in a controlled...

RHEL 4 : ruby (RHSA-2005:799)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:799 advisory. Ruby is an interpreted scripting language for object-oriented programming. A bug was found in the way ruby handles eval statements. It is possible for...

RHEL 4 : openldap and nss_ldap (RHSA-2005:767)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:767 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. The nssldap module is an...

RHEL 4 : util-linux and mount (RHSA-2005:782)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:782 advisory. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The mount...

RHEL 4 : netpbm (RHSA-2005:793)

Updated netpbm packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including...

gdb security update

CentOS Errata and Security Advisory CESA-2005:801-01 An updated gdb package that fixes minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GDB, the GNU debugger, allows debugging of programs written in C, C++, and...

CVE-2005-2978

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap PNM images to Portable Network Graphics PNG, which might allow attackers to execute arbitrary code by modifying the stack...

CVE-2005-2978

pnmtopng in netpbm before 10.25, when using the -trans option, uses uninitialized size and index variables when converting Portable Anymap PNM images to Portable Network Graphics PNG, which might allow attackers to execute arbitrary code by modifying the stack...

CVE-2005-3257

The VT implementation vtioctl.c in Linux kernel 2.6.12, and possibly other versions including 2.6.14.4, allows local users to use the KDSKBSENT ioctl on terminals of other users and gain privileges, as demonstrated by modifying key bindings using loadkeys...

CVE-2005-3255

The 1 cgiwrap and 2 php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, which allows remote attackers to obtain sensitive information via direct requests to those CGIs...

Immunity Canvas: STINKY

Name| stinky ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Notes| CVE Name: CVE-2005-3252 VENDOR: SourceFire Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date public...

CVE-2005-3254

The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs that are greater than the minimum value, which should be 1000 on Debian...

Immunity Canvas: STINKY_DEBUG

Name| stinkydebug ---|--- CVE| CVE-2005-3252 Exploit Pack| CANVAS Description| Stinky Debug Notes| CVE Name: CVE-2005-3252 VENDOR: Stinky Repeatability: Single shot References: http://xforce.iss.net/xforce/alerts/id/207 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3252 Date...

netpbm, xloadimage security update

CentOS Errata and Security Advisory CESA-2005:793 Updated netpbm packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for...

Moderate: Red Hat Security Advisory: netpbm security update

Updated netpbm packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including...

CVE-2005-2978

The CVE-2005-2978 issue affects netpbm’s pnmtopng prior to 10.25, where using -trans can access uninitialized size and index variables during PNM→PNG conversion, potentially enabling arbitrary code execution via stack modification. Remediation shown across multiple advisories (e.g., Debian DSA-87...

CVE-2005-3255

The CVE-2005-3255 issue affects the Debian GNU/Linux packages cgiwrap and php-cgiwrap (before version 3.9), where debugging CGI scripts under the web document root are exposed and can be directly requested by remote attackers to obtain sensitive information. This description is supported by multi...

CVE-2005-2969

OpenSSL CVE-2005-2969 enables a protocol-version rollback attack (via SSL_OP_MSIE_SSLV2_RSA_PADDING) that can cause a client and server to negotiate a weaker protocol. Public disclosures in Debian advisories (DSA-875/881/882) show the fix across OpenSSL 0.9.4–0.9.7 lines with upgraded packages (e...

CVE-2005-3257

Summary: CVE-2005-3257 affects the Linux kernel (examples: 2.6.12 and possibly 2.6.14.4) where a local user can exploit the KDSKBSENT ioctl on terminals of other users to escalate privileges, demonstrated by modifying key bindings via loadkeys. Affected components: vt_ioctl.c in the VT subsystem ...

CVE-2005-3256

CVE-2005-3256 affects Enigmail, where the key selection dialogue in versions before 0.92.1 can choose a key whose user ID has no additional information. This can lead to encrypting with the wrong public key, potentially enabling disclosure of confidential data. The issue is described in multiple ...