Debian DSA-828-1 : squid - authentication handling

Upstream developers of squid, the popular WWW proxy cache, have discovered that changes in the authentication scheme are not handled properly when given certain request sequences while NTLM authentication is in place, which may cause the daemon to restart. %NASLMINLEVEL 70300 C Tenable Network...

SUSE-SA:2005:058: mozilla,MozillaFirefox

The remote host is missing the patch for the advisory SUSE-SA:2005:058 mozilla,MozillaFirefox. The web browsers Mozilla and Mozilla Firefox have been updated to contain fixes for the vulnerabilities fixed in: - Mozilla browser suite version 1.7.12 - Mozilla Firefox version 1.0.7 The security...

RHEL 4 : firefox (RHSA-2005:785)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:785 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox processes XBM image files. If a user views a specially...

Slackware 10.0 / 10.1 / current : kcheckpass in kdebase (SSA:2005-251-01)

New kdebase packages are available for Slackware 10.0, 10.1, and -current to fix a security issue with the kcheckpass program. Earlier versions of Slackware are not affected. A flaw in the way the program creates lockfiles could allow a local attacker to gain root privileges. %NASLMINLEVEL 70300 ...

RHEL 3 : net-snmp (RHSA-2005:373)

Updated net-snmp packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of service bug was...

Debian DSA-834-1 : prozilla - buffer overflow

Tavis Ormandy discovered a buffer overflow in prozilla, a multi-threaded download accelerator, which may be exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Fedora Core 3 : cups-1.1.22-0.rc1.8.7 (2005-908)

A bug was found in the way CUPS processes malformed HTTP requests. It is possible for a remote user capable of connecting to the CUPS daemon to issue a malformed HTTP GET request which will cause CUPS to enter an infinite loop. This is CVE-2005-2874. Note that Tenable Network Security has extract...

Mandrake Linux Security Advisory : util-linux (MDKSA-2005:167)

David Watson disovered that the umount utility, when using the '-r' cpmmand, could remove some restrictive mount options such as 'nosuid'. IF /etc/fstab contained user-mountable removable devices that specified nosuid, a local attacker could exploit this flaw to execute arbitrary programs with ro...

Debian DSA-817-1 : python2.2 - integer overflow

An integer overflow with a subsequent buffer overflow has been detected in PCRE, the Perl Compatible Regular Expressions library, which allows an attacker to execute arbitrary code, and is also present in Python. Exploiting this vulnerability requires an attacker to specify the used regular...

SUSE-SA:2005:051: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2005:051 php4,php5. This update fixes the following security issues in the PHP scripting language. - Bugs in the PEAR::XMLRPC library allowed remote attackers to pass arbitrary PHP code to the eval function CVE-2005-1921, CVE-2005-2498...

Mandrake Linux Security Advisory : squid (MDKSA-2005:162)

Two vulnerabilities were recently discovered in squid : The first is a DoS possible via certain aborted requests that trigger an assertion error related to 'STOPPENDING' CVE-2005-2794. The second is a DoS caused by certain crafted requests and SSL timeouts CVE-2005-2796. The updated packages have...

RHEL 3 : slocate (RHSA-2005:345)

An updated slocate package that fixes a denial of service and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a central database...

Mandrake Linux Security Advisory : bluez-utils (MDKSA-2005:150)

A vulnerability in bluez-utils was discovered by Henryk Plotz. Due to missing input sanitizing, it was possible for an attacker to execute arbitrary commands supplied as a device name from the remote bluetooth device. The updated packages have been patched to correct this problem. %NASLMINLEVEL...

Mandrake Linux Security Advisory : php-pear (MDKSA-2005:146)

A problem was discovered in the PEAR XML-RPC Server package included in the php-pear package. If a PHP script which implements the XML-RPC Server is used, it would be possible for a remote attacker to construct an XML-RPC request which would cause PHP to execute arbitrary commands as the 'apache'...

SUSE-SA:2005:046: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2005:046 apache,apache2. A security flaw was found in the Apache and Apache2 web servers which allows remote attacker to 'smuggle' requests past filters by providing handcrafted header entries. Fixed Apache 2 server packages were...

SUSE-SA:2005:055: clamav

The remote host is missing the patch for the advisory SUSE-SA:2005:055 clamav. This update upgrades clamav to version 0.87. It fixes vulnerabilities in handling of UPX and FSG compressed executables, which could lead to a remote attacker executing code within the daemon using clamav. These are...

Mandrake Linux Security Advisory : evolution (MDKSA-2005:141)

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers. CVE-2005-2549 A format...

Mandrake Linux Security Advisory : apache2 (MDKSA-2005:129)

Marc Stern reported an off-by-one overflow in the modssl CRL verification callback which can only be exploited if the Apache server is configured to use a malicious certificate revocation list CVE-2005-1268. Watchfire reported a flaw that occured when using the Apache server as a HTTP proxy. A...

Slackware 10.0 / 10.1 / 10.2 / current : Mozilla/Firefox (SSA:2005-269-01)

New Mozilla and Firefox packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix security issues: MFSA 2005-59 Command-line handling on Linux allows shell execution MFSA 2005-58 Firefox 1.0.7 / Mozilla Suite 1.7.12 Vulnerability Fixes MFSA 2005-57 IDN heap overrun using...

SUSE-SA:2005:056: XFree86-server,xorg-x11-server

The remote host is missing the patch for the advisory SUSE-SA:2005:056 XFree86-server,xorg-x11-server. The X server memory can be accessed my a malicious X client by exploiting a missing range check in the function XCreatePixmap. This bug can probably be used to execute arbitrary code with the...