10533 matches found
DSA-1011-1 kernel-patch-server, util-vserver - missing attribute support
Bulletin has no description...
[SECURITY] [DSA 1010-1] New ilohamail packages fix cross-site scripting vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1010-1 [email protected] http://www.debian.org/security/ Martin Schulze March 20th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 960-3] New libmail-audit-perl packages fix insecure temporary file use
-------------------------------------------------------------------------- Debian Security Advisory DSA 960-3 [email protected] http://www.debian.org/security/ Martin Schulze March 20th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 960-3] New libmail-audit-perl packages fix insecure temporary file use
-------------------------------------------------------------------------- Debian Security Advisory DSA 960-3 [email protected] http://www.debian.org/security/ Martin Schulze March 20th, 2006 http://www.debian.org/security/faq -...
CVE-2005-4738
IBM DB2 Universal Database (UDB) 8.1.0 prior to ESE AIX 5765F4100 is vulnerable to privilege escalation because it does not verify execute privileges for objects created from routines, allowing remote authenticated users to gain privileges. Affected product/version: IBM DB2 UDB 8.1.0 (ESE AIX 576...
CVE-2005-4741
NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid PSUGID process that performs an exec without a reset of real credentials...
CVE-2005-4734
CVE-2005-4734 describes a stack-based buffer overflow in IISWebAgentIF.dll of the RSA Authentication Agent for Web (SecurID Web Agent) for IIS. A long url parameter in the Redirect method can allow remote attackers to execute arbitrary code. Affected are RSA SecurID Web Agent for IIS versions 5.2...
CVE-2005-4732
CVE-2005-4732 describes multiple cross-site scripting (XSS) vulnerabilities in index.php of Tux Bank/TuxRacer 0.7x and 0.8, exploitable via the (1) name and (2) description parameters. Impact is remote script/HTML injection; CVSSv2 base score 4.3 (Medium). Connected documents confirm the issue bu...
CVE-2005-4742
Technical details for CVE-2005-4742 are not publicly available in the provided documents; monitor for updates.
CVE-2005-4733
CVE-2005-4733 concerns NetBSD: affected are NetBSD 2.0 before 20050316 and NetBSD-current before 20050112. The issue is a local DoS caused by calling the F_CLOSEM fcntl with a parameter value of 0, which can trigger an infinite loop and system hang. The connected documents confirm the affected ve...
CVE-2005-4735
IBM DB2 Universal Database (UDB) 8.1 Release 810 before 8.1 FP10 is affected by a DoS vulnerability reported as CVE-2005-4735. The issue allows remote authenticated users to crash the application via two input-based vectors: (1) certain equality predicates that trigger self-removal (IY70808) and ...
CVE-2005-4741
NetBSD is affected: versions 1.6, 2.0–2.1, and NetBSD-current before 20051031. The issue is a local privilege escalation: a debugger can attach to a setuid/setgid (P_SUGID) process that performs an exec without resetting real credentials. Root cause: lack of credential reset on exec for P_SUGID p...
CVE-2005-4737
CVE-2005-4737 affects IBM DB2 Universal Database (UDB) 8.2 before ESE AIX 5765F4100. The issue allows remote authenticated users to cause a denial of service (CPU consumption) by abnormally terminating a connection, which prevents db2agents from being properly cleared. Documentation consistently ...
CVE-2006-1268
The CVE-2006-1268 entry concerns the Internet Key Exchange (IKE) implementation in Funkwerk X2300 7.2.1, where remote attackers can cause a denial of service and possibly execute arbitrary code using crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite. The advisory notes ambiguit...
DSA-1008-1 kpdf - buffer overflow
Bulletin has no description...
[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1005-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1005-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1004-1] New vlc packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1004-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...