Debian Security Advisory DSA 822-1 (gtkdiskfree)

The remote host is missing an update to gtkdiskfree announced via advisory DSA 822-1. Eric Romang discovered that gtkdiskfree, a GNOME program that shows free and used space on filesystems, creates a temporary file in an insecure fashion. The old stable distribution woody does not contain the...

Debian: Security Advisory (DSA-921-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 871-1 (libgda2)

The remote host is missing an update to libgda2 announced via advisory DSA 871-1. Steve Kemp discovered two format string vulnerabilities in libgda2, the GNOME Data Access library for GNOME2, which may lead to the execution of arbitrary code in programs that use this library. The old stable...

Debian: Security Advisory (DSA-787-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 677-1 (sympa)

The remote host is missing an update to sympa announced via advisory DSA 677-1. OpenVAS Vulnerability Test $Id: deb6771.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 677-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 917-1 (courier)

The remote host is missing an update to courier announced via advisory DSA 917-1. Patrick Cheong Shu Yang discovered that courier-authdaemon, the authentication daemon of the Courier Mail Server, grants access to accounts that are already deactivated. For the old stable distribution woody this...

Debian Security Advisory DSA 969-1 (scponly)

The remote host is missing an update to scponly announced via advisory DSA 969-1. Max Vozeller discovered a vulnerability in scponly, a utility to restrict user commands to scp and sftp, that could lead to the execution of arbitray commands as root. The system is only vulnerable if the program...

Debian Security Advisory DSA 772-1 (apt-cacher)

The remote host is missing an update to apt-cacher announced via advisory DSA 772-1. Eduard Bloch discovered a bug in apt-cacher, a caching system for Debian package and source files, that could allow remote attackers to execute arbitrary commands on the caching host as user www-data. The old...

Debian Security Advisory DSA 921-1 (kernel-source-2.4.27)

The remote host is missing an update to kernel-source-2.4.27 announced via advisory DSA 921-1. OpenVAS Vulnerability Test $Id: deb9211.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 921-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 755-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 755-1. Frank Warmerdam discovered a stack-based buffer overflow in libtiff, the Tag Image File Format library for processing TIFF graphics files that can lead to the executionof arbitrary code via malformed TIFF files. For th...

Debian Security Advisory DSA 845-1 (mason)

The remote host is missing an update to mason announced via advisory DSA 845-1. Christoph Martin noticed that upon configuration mason, which interactively creates a Linux packet filtering firewall, does not install the init script to actually load the firewall during system boot. This will leave...

Debian Security Advisory DSA 705-1 (wu-ftpd)

The remote host is missing an update to wu-ftpd announced via advisory DSA 705-1. OpenVAS Vulnerability Test $Id: deb7051.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 705-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 717-1 (lsh-utils)

The remote host is missing an update to lsh-utils announced via advisory DSA 717-1. OpenVAS Vulnerability Test $Id: deb7171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 717-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 846-1 (cpio)

The remote host is missing an update to cpio announced via advisory DSA 846-1. Two vulnerabilities have been discovered in cpio, a program to manage archives of files. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1111 Imran Ghory discovered a race...

Debian Security Advisory DSA 778-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 778-1. Two security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2556 A remote attacker could...

Debian Security Advisory DSA 830-1 (ntlmaps)

The remote host is missing an update to ntlmaps announced via advisory DSA 830-1. Drew Parsons noticed that the post-installation script of ntlmaps, an NTLM authorisation proxy server, changes the permissions of the configuration file to be world-readable. It contains the user name and password o...

Debian Security Advisory DSA 679-1 (toolchain-source)

The remote host is missing an update to toolchain-source announced via advisory DSA 679-1. OpenVAS Vulnerability Test $Id: deb6791.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 679-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[DSECRG-08-002] Local File Include in arias 0.99-6

Digital Security Research Group DSecRG Advisory DSECRG-08-002 Application: aria-0.99-6 Web based ERP Versions Affected: aria-0.99-6 Vendor URL: http://www.tucows.net/ Bug: Local File Include Exploits: YES Reported: 09.01.2008 Vendor Response: None Date of Public Advisory: 15.01.2008 Authors:...

Debian Security Advisory DSA 869-1 (eric)

The remote host is missing an update to eric announced via advisory DSA 869-1. The developers of eric, a full featured Python IDE, have fixed a bug in the processing of project files that could lead to the execution of arbitrary code. The old stable distribution woody does not contain an eric...

Debian Security Advisory DSA 774-1 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory DSA 774-1. Edward Shornock discovered a bug in the UIDL handling code of fetchmail, a common POP3, APOP and IMAP mail fetching utility. A malicious POP3 server could exploit this problem and inject arbitrary code that will b...