CVE-2005-2878

CVE-2005-2878 is a format-string vulnerability in GNU Mailutils imap4d’s SEARCH handling. An authenticated attacker could exploit it to execute arbitrary code with imap4d privileges. Debian and Gentoo advisories (DSA-841-1, GLSA 200509-10) document the fix to mailutils 0.6.1-4sarge1 and related p...

CVE-2005-2876

CVE-2005-2876 affects util-linux (and related packages) up to 2.12q/2.13-pre versions; local users with unmount permissions can use remount (-r) to remount a filesystem read-only, clearing nosuid, nodev, and similar flags and enabling privilege escalation. Public advisories (Debian DSA-823-1, Gen...

CVE-2005-2876

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r remount option, which causes the file system to be remounted with just the read-only flag, which effectively clears the...

[OpenPKG-SA-2005.021] OpenPKG Security Advisory (squid)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2005.021 10-Sep-2005 Package: squid Vulnerability: denial of service OpenPKG Specific...

Linksys WRT54G < 4.20.7 WRT54GS < 1.05.2 apply.cgi Buffer Overflow

No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'Linksys apply.cgi buffer overflow', 'Description' = %q This module exploits a stack overflow in apply.cgi on th...

RHEL 2.1 : XFree86 (RHSA-2005:329)

Updated XFree86 packages that fix several integer overflows are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an open source implementation of the X Window System. It provides the...

Linksys WRT54G 4.20.7 WRT54GS 1.05.2 - apply.cgi Remote Buffer Overflow (Metasploit)

Linksys WRT54G 4.20.7 WRT54GS 1.05.2 - apply.cgi Remote Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'Linksys apply.cgi buffer overflow', 'Description' = %q This module exploits a stack overflow in apply.cgi on the Linksys WRT54G and WRT54GS routers. According to iDefense who...

[SECURITY] [DSA 807-1] New mod_ssl packages fix acl restriction bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 807-1 [email protected] http://www.debian.org/security/ Martin Schulze September 12th, 2005 http://www.debian.org/security/faq -...

Fedora Core 3 : evolution-2.0.4-4 (2005-338)

Fri Apr 22 2005 David Malcolm - 2.0.4-4 - Added the correct patch this time - Wed Apr 20 2005 David Malcolm - 2.0.4-3 - Added patch for 155378 CVE-2005-0806 - Updated mozillabuildversion from 1.7.6 to 1.7.7 Note that Tenable Network Security has extracted the preceding description block directly...

Fedora Core 3 : ImageMagick-6.2.0.7-2.fc3 (2005-235)

Andrei Nigmatulin discovered a heap based buffer overflow flaw in the ImageMagick image handler. An attacker could create a carefully crafted Photoshop Document PSD image in such a way that it would cause ImageMagick to execute arbitrary code when processing the image. The Common Vulnerabilities...

RHEL 4 : exim (RHSA-2005:358)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:358 advisory. Exim is a mail transport agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. An integer overflow fla...

RHEL 4 : firefox (RHSA-2005:768)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:768 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox processes certain international domain names. An attacker could crea...

Fedora Core 3 : kernel-2.6.11-1.14_FC3 (2005-313)

This update rebases the kernel to the latest upstream stable release, which fixes a number of security issues. Notably : - CVE-2005-0210 : dst leak - CVE-2005-0384 : ppp dos - CVE-2005-0531 : Sign handling issues. - CVE-2005-0400 : EXT2 information leak. - CVE-2005-0449 : Remote oops. -...

Fedora Core 3 : gaim-1.1.3-1.FC3 (2005-160)

Sat Feb 19 2005 Warren Togami 1:1.1.3-1.FC3 - FC3 - Fri Feb 18 2005 Warren Togami 1:1.1.3-2 - 1.1.3 including two security fixes CVE-2005-0472 Client freezes when receiving certain invalid messages CVE-2005-0473 Client crashes when receiving specific malformed HTML Note that Tenable Network...

RHEL 4 : httpd (RHSA-2005:608)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:608 advisory. The Apache HTTP Server is a popular and freely-available Web server. A flaw was discovered in modssl's handling of the SSLVerifyClient...

Fedora Core 4 : php-5.0.4-10.4 (2005-810)

This update includes the latest upstream version of the PEAR XMLRPC package, which fixes a security issue in request parsing in the XMLRPC Server code. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2005-2498 to this issue. Note that Tenable Network...

Fedora Core 3 : tcpdump-3.8.2-8.FC3 (2005-351)

Fri Apr 29 2005 Martin Stransky - 14:3.8.2-8.FC3 - fix for CVE-2005-1280 Multiple DoS issues in tcpdump CVE-2005-1279 CVE-2005-1278, 156040 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora Core 3 : xorg-x11-6.8.2-1.FC3.13 (2005-273)

An integer overflow flaw was found in libXpm, which is used by some applications for loading of XPM images. An attacker could create a malicious XPM file that would execute arbitrary code if opened by a victim using an application linked to the vulnerable library. The Common Vulnerabilities and...

Debian DSA-806-1 : gcvs - insecure temporary files

Marcus Meissner discovered that the cvsbug program from gcvs, the Graphical frontend for CVS, which serves the popular Concurrent Versions System, uses temporary files in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

Fedora Core 3 : php-4.3.11-2.4 (2005-315)

This update includes the latest stable release of PHP 4.3, including a number of security fixes to the exif extension CVE-2005-1042 and CVE-2005-1043 and the getimagesize function CVE-2005-0524, along with many bug fixes. Note that Tenable Network Security has extracted the preceding description...