Debian DSA-817-1 : python2.2 - integer overflow

An integer overflow with a subsequent buffer overflow has been detected in PCRE, the Perl Compatible Regular Expressions library, which allows an attacker to execute arbitrary code, and is also present in Python. Exploiting this vulnerability requires an attacker to specify the used regular...

Mandrake Linux Security Advisory : util-linux (MDKSA-2005:167)

David Watson disovered that the umount utility, when using the '-r' cpmmand, could remove some restrictive mount options such as 'nosuid'. IF /etc/fstab contained user-mountable removable devices that specified nosuid, a local attacker could exploit this flaw to execute arbitrary programs with ro...

RHEL 3 : slocate (RHSA-2005:345)

An updated slocate package that fixes a denial of service and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Slocate is a security-enhanced version of locate. Like locate, slocate searches through a central database...

Fedora Core 3 : thunderbird-1.0.7-1.1.fc3 (2005-962)

An updated thunderbird package that fixes various bugs is now available for Fedora Core 3. This update has been rated as having important security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way Thunderbird...

Mandrake Linux Security Advisory : wxPythonGTK (MDKSA-2005:144)

Wouter Hanegraaff discovered that the TIFF library did not sufficiently validate the 'YCbCr subsampling' value in TIFF image headers. Decoding a malicious image with a zero value resulted in an arithmetic exception, which can cause a program that uses the TIFF library to crash. wxPythonGTK uses a...

RHEL 4 : HelixPlayer (RHSA-2005:788)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:788 advisory. HelixPlayer is a media player. A format string bug was discovered in the way HelixPlayer processes RealPix .rp files. It is possible for a...

Debian DSA-819-1 : python2.1 - integer overflow

An integer overflow with a subsequent buffer overflow has been detected in PCRE, the Perl Compatible Regular Expressions library, which allows an attacker to execute arbitrary code, and is also present in Python. Exploiting this vulnerability requires an attacker to specify the used regular...

Debian DSA-826-1 : helix-player - multiple vulnerabilities

Multiple security vulnerabilities have been identified in the helix-player media player that could allow an attacker to execute code on the victim's machine via specially crafted network resources. - CAN-2005-1766 Buffer overflow in the RealText parser could allow remote code execution via a...

Fedora Core 3 : kernel-2.6.12-1.1378_FC3 (2005-905)

Wed Sep 14 2005 Dave Jones 2.6.12-1.1378FC3 - Fixes for CVE-2005-2490 and CVE-2005-2492 - Mon Sep 5 2005 Dave Jones - Fix aic7xxx issue with 4GB. 167049 - Fri Sep 2 2005 Dave Jones 2.6.12-1.1377FC3 - Various post 2.6.13 ACPI updates. 20050902 - Mon Aug 29 2005 Dave Jones - Fix local builds when...

Mandrake Linux Security Advisory : apache2 (MDKSA-2005:161)

A flaw was discovered in modssl's handling of the 'SSLVerifyClient' directive. This flaw occurs if a virtual host is configured using 'SSLVerifyClient optional' and a directive 'SSLVerifyClient required' is set for a specific location. For servers configured in this fashion, an attacker may be ab...

RHEL 3 : binutils (RHSA-2005:659)

An updated binutils package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the creation of executable code. A number of bugs were fou...

SUSE-SA:2005:047: acroread

The remote host is missing the patch for the advisory SUSE-SA:2005:047 acroread. A buffer overflow was found in the core application plug-in for the Adobe Reader, that allows attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors. This is tracked by t...

RHEL 4 : cups (RHSA-2005:772)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:772 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating systems. A bug was found in the way CUPS processes malform...

Mandrake Linux Security Advisory : kdebase (MDKSA-2005:160)

Ilja van Sprundel from suresec.org notified the KDE security team about a serious lock file handling error in kcheckpass that can, in some configurations, be used to gain root access. In order for an exploit to succeed, the directory /var/lock has to be writeable for a user that is allowed to...

SUSE-SA:2005:049: php4, php5

The remote host is missing the patch for the advisory SUSE-SA:2005:049 php4, php5. This update fixes the following security issues in the PHP scripting language. - Bugs in the PEAR::XMLRPC library allowed remote attackers to pass arbitrary PHP code to the eval function CVE-2005-1921, CVE-2005-249...

Fedora Core 4 : thunderbird-1.0.7-1.1.fc4 (2005-963)

An updated thunderbird package that fixes various bugs is now available for Fedora Core 4. This update has been rated as having important security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way Thunderbird...

CVE-2005-3135

Buffer overflow in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to execute arbitrary code via a long filename...

[SECURITY] [DSA 833-2] New mysql-dfsg-4.1 package fixes arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 833-2 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 841-1] New mailutils packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 841-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2005 http://www.debian.org/security/faq -...

Symantec Antivirus Scan Engine: Web Service Administrative Interface Buffer Overflow

SUMMARY The remote exploitation of a buffer overflow vulnerability in the web-based Administrative Interface of the Symantec AntiVirus Scan Engine product could potentially allow remote attackers to execute arbitrary code on a targeted system Risk Impact HIGH Remote Access | Yes ---|--- Local...