SUSE-SA:2005:054: evolution

The remote host is missing the patch for the advisory SUSE-SA:2005:054 evolution. Several format string bugs allowed remote attackers to cause evolution to crash or even execute code via full vCard data, contact data from remote LDAP servers, task list data from remote servers CVE-2005-2549 or...

RHEL 4 : cups (RHSA-2005:772)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:772 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating systems. A bug was found in the way CUPS processes malform...

Fedora Core 3 : kernel-2.6.12-1.1378_FC3 (2005-905)

Wed Sep 14 2005 Dave Jones 2.6.12-1.1378FC3 - Fixes for CVE-2005-2490 and CVE-2005-2492 - Mon Sep 5 2005 Dave Jones - Fix aic7xxx issue with 4GB. 167049 - Fri Sep 2 2005 Dave Jones 2.6.12-1.1377FC3 - Various post 2.6.13 ACPI updates. 20050902 - Mon Aug 29 2005 Dave Jones - Fix local builds when...

Debian DSA-819-1 : python2.1 - integer overflow

An integer overflow with a subsequent buffer overflow has been detected in PCRE, the Perl Compatible Regular Expressions library, which allows an attacker to execute arbitrary code, and is also present in Python. Exploiting this vulnerability requires an attacker to specify the used regular...

Mandrake Linux Security Advisory : wxPythonGTK (MDKSA-2005:144)

Wouter Hanegraaff discovered that the TIFF library did not sufficiently validate the 'YCbCr subsampling' value in TIFF image headers. Decoding a malicious image with a zero value resulted in an arithmetic exception, which can cause a program that uses the TIFF library to crash. wxPythonGTK uses a...

Fedora Core 3 : thunderbird-1.0.7-1.1.fc3 (2005-962)

An updated thunderbird package that fixes various bugs is now available for Fedora Core 3. This update has been rated as having important security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way Thunderbird...

RHEL 4 : HelixPlayer (RHSA-2005:788)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:788 advisory. HelixPlayer is a media player. A format string bug was discovered in the way HelixPlayer processes RealPix .rp files. It is possible for a...

SUSE-SA:2005:047: acroread

The remote host is missing the patch for the advisory SUSE-SA:2005:047 acroread. A buffer overflow was found in the core application plug-in for the Adobe Reader, that allows attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors. This is tracked by t...

RHEL 3 : binutils (RHSA-2005:659)

An updated binutils package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the creation of executable code. A number of bugs were fou...

Fedora Core 4 : thunderbird-1.0.7-1.1.fc4 (2005-963)

An updated thunderbird package that fixes various bugs is now available for Fedora Core 4. This update has been rated as having important security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way Thunderbird...

SUSE-SA:2005:049: php4, php5

The remote host is missing the patch for the advisory SUSE-SA:2005:049 php4, php5. This update fixes the following security issues in the PHP scripting language. - Bugs in the PEAR::XMLRPC library allowed remote attackers to pass arbitrary PHP code to the eval function CVE-2005-1921, CVE-2005-249...

Mandrake Linux Security Advisory : kdebase (MDKSA-2005:160)

Ilja van Sprundel from suresec.org notified the KDE security team about a serious lock file handling error in kcheckpass that can, in some configurations, be used to gain root access. In order for an exploit to succeed, the directory /var/lock has to be writeable for a user that is allowed to...

Debian DSA-826-1 : helix-player - multiple vulnerabilities

Multiple security vulnerabilities have been identified in the helix-player media player that could allow an attacker to execute code on the victim's machine via specially crafted network resources. - CAN-2005-1766 Buffer overflow in the RealText parser could allow remote code execution via a...

Mandrake Linux Security Advisory : apache2 (MDKSA-2005:161)

A flaw was discovered in modssl's handling of the 'SSLVerifyClient' directive. This flaw occurs if a virtual host is configured using 'SSLVerifyClient optional' and a directive 'SSLVerifyClient required' is set for a specific location. For servers configured in this fashion, an attacker may be ab...

CVE-2005-3135

Buffer overflow in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to execute arbitrary code via a long filename...

[SECURITY] [DSA 833-2] New mysql-dfsg-4.1 package fixes arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 833-2 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 841-1] New mailutils packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 841-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2005 http://www.debian.org/security/faq -...

Symantec Antivirus Scan Engine: Web Service Administrative Interface Buffer Overflow

SUMMARY The remote exploitation of a buffer overflow vulnerability in the web-based Administrative Interface of the Symantec AntiVirus Scan Engine product could potentially allow remote attackers to execute arbitrary code on a targeted system Risk Impact HIGH Remote Access | Yes ---|--- Local...

CVE-2005-2804

CVE-2005-2804 describes an Integer overflow in the registry parsing code of GroupWise 6.5.3 (and possibly earlier versions) that could be triggered by a large TCP/IP port value stored in a Windows registry key. This flaw allows remote attackers to cause an application crash (denial of service). T...

CVE-2005-3127

LucidCMS 1.0.11 is affected by a Cross-site scripting (XSS) vulnerability in index.php, exploitable via the query string to inject arbitrary script/HTML. The provided sources confirm the vulnerability description but do not specify a patch version or mitigation. Exploitation details or in-the-wil...