SUSE-SA:2007:005: w3m

The remote host is missing the patch for the advisory SUSE-SA:2007:005 w3m. A format string problem in w3m -dump / -backend mode could be used by a malicious server to crash w3m or execute code. In SUSE Linux 10.1, openSUSE 10.2 and SUSE Linux Enterprise Server and Desktop 10 this problem was not...

SUSE-SA:2006:050: ImageMagick

The remote host is missing the patch for the advisory SUSE-SA:2006:050 ImageMagick. Several security problems have been fixed in ImageMagick: - CVE-2006-3744: Several heap buffer overflows were found in the Sun Bitmap decoder of ImageMagick during an audit by the Google Security Team. This proble...

SUSE-SA:2006:071: phpMyAdmin

The remote host is missing the patch for the advisory SUSE-SA:2006:071 phpMyAdmin. The phpMyAdmin package was upgraded to version 2.9.1.1. While we usually do not do version upgrades, fixing the occurring security problems of phpMyAdmin got too difficult so we decided to go with the current...

SUSE-SA:2006:076: libgsf

The remote host is missing the patch for the advisory SUSE-SA:2006:076 libgsf. The libgsf library is used by various GNOME programs to handle for instance OLE2 data streams. Specially crafted OLE documents enabled attackers to use a heap buffer overflow for potentially executing code. This issue ...

Mandrake Linux Security Advisory : libpng (MDKSA-2006:209)

Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to 'chunk error processing,' possibly involving the 'chunkname'. CVE-2006-33...

Mandrake Linux Security Advisory : proftpd (MDKSA-2006:217-1)

A stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier, allows remote attackers to cause a denial of service, as demonstrated by vdproftpd.pm, a 'ProFTPD remote exploit.' CVE-2006-5815 Buffer overflow in the tlsx509nameoneline function in the modtls module, as used in...

SUSE-SA:2006:069: asterisk

The remote host is missing the patch for the advisory SUSE-SA:2006:069 asterisk. Two security problem have been found and fixed in the PBX software Asterisk. CVE-2006-5444: Integer overflow in the getinput function in the Skinny channel driver chanskinny.c as used by Cisco SCCP phones, allows...

SUSE-SA:2006:063: Qt

The remote host is missing the patch for the advisory SUSE-SA:2006:063 Qt. Multiple integer overflows have been found in image processing functions within the Qt class library, used for instance by the web browser 'konqueror' and its rendering engine 'khtml'. These problems could potentially lead...

SUSE-SA:2006:061: opera

The remote host is missing the patch for the advisory SUSE-SA:2006:061 opera. The web browser Opera has been updated to fix 2 security problems. CVE-2006-4339: Opera was affected by the RSA signature checking problem found in openssl, since it is statically linked against openssl. CVE-2006-4819: ...

SUSE-SA:2006:051: apache2

The remote host is missing the patch for the advisory SUSE-SA:2006:051 apache2. The web server Apache2 has been updated to fix several security issues: The security fix for CVE-2005-3357 denial of service broke the earlier security fix for SSL verification CVE-2005-2700. This problem has been...

RHEL 2.1 / 3 / 4 : ImageMagick (RHSA-2007:0015)

Updated ImageMagick packages that correct several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple...

GLSA-200702-05 : Fail2ban: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200702-05 Fail2ban: Denial of Service A flaw in the method used to parse log entries allows remote, unauthenticated attackers to forge authentication attempts from other hosts. Impact : A remote attacker can add arbitrary hosts to...

Fedora Core 5 : spamassassin-3.1.8-1.fc5 (2007-242)

This upgrades to version 3.1.8, which fixes some bugs and CVE-2007-0451 Malformed HTML Denial of Service. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Unrestricted file upload

Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit isguest and isuser parameters. NOTE: this issue might be related to CVE-2006-4875...

VERITAS NetBackup bpcd daemon command chaining vulnerability

Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...

CA BrightStor ARCserve Message Engine Heap Overflow

This module exploits a heap overflow in Computer Associates BrightStor ARCserve Backup 11.5. By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2006-7016

phpjobboard allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin.php with adminop=job-edit...

CVE-2006-7018

phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argument to the nomeevento parameter to phpwcmscodesnippets/mailfileform.php and 2 sampleextphp/mailfileform.php, which is processed by the renderPHPcode function...

CVE-2006-7018

Affected software : phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4. Vulnerability : remote code execution via a crafted argument to the nome_evento parameter in phpwcms_code_snippets/mail_file_form.php and (2) sample_ext_php/mail_file_form.php, processed by the render_PHPcode function. Impact ...

CVE-2006-7012

CVE-2006-7012 affects the CGI script scart.cgi in SCart 2.0 . The vulnerability allows remote attackers to execute arbitrary commands by passing shell metacharacters in the page parameter of a show_text action, leading to full system compromise (high severity, network exposure). The provided docu...