Fedora Core 4 : dia-0.94-16.fc4 (2006-580)

CVE-2006-2480/CVE-2006-2453 Dia format string issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2006-6931

Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service CPU consumption and detection outage via crafted network traffic, aka a "backtracking attack."...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive files under the web root with insufficient access control, enabling remote download of (at least) ServerKey.pem and AcceptIP.txt via direct requests. Root cause: improper access restrictions exposing sensitive files. No explicit exploitation details are provi...

CVE-2006-6931

CVE-2006-6931 affects Snort before 2.6.1. The vulnerability arises during predicate evaluation in rule matching, enabling remote attackers to trigger CPU consumption and a detection outage (backtracking attack). Impact is a partial availability denial of service. Fixes are available in updated Sn...

CVE-2006-6932

CVE-2006-6932: The description indicates multiple SQL injection vulnerabilities in Image Gallery with Access Database. An attacker can remotely execute arbitrary SQL commands by supplying crafted input to (1) id in dispimage.asp, or (2) order or (3) page in default.asp. No vendor/product version ...

CVE-2006-6934

CVE-2006-6934 concerns Portix-PHP 0.4.2. The vulnerability is an XSS flaw in the forum post input: the fields Titre and Auteur can be crafted to inject arbitrary web script or HTML. The connected PT-2007-1214 document confirms the affected version and states the issue arises from user-supplied in...

CVE-2006-6935

Portix-PHP 0.4.2 is affected by an SQL injection in the login component, exploitable via the username and passwd fields, allowing remote attackers to execute arbitrary SQL commands. The issue is tied to Portix-PHP version 0.4.2 and is addressed by updating to a fixed version (per PT-2007-1215 rec...

CVE-2006-5171

Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates CA Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow...

CVE-2006-5172

The CVE-2006-5172 entry covers a stack-based buffer overflow in the SUN RPC service (SUNRPC interface) of Mediasvr.exe within CA Brightstor ARCserve Backup 9.01–11.5, CA Enterprise Backup 10.5, and CA Protection Suites r2. The underlying flaw is a buffer overflow triggered by crafted SUNRPC packe...

CVE-2006-5171

CVE-2006-5171 is a stack-based buffer overflow in the SUN RPC interface of Mediasvr.exe used by CA Brightstor ARCserve Backup (9.01–11.5), Enterprise Backup 10.5, and CA Protection Suites r2. The flaw allows remote attackers to execute arbitrary code via crafted SUNRPC packets. Related entries (e...

CVE-2006-5876

The soupheadersparse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service crash via malformed HTTP headers, probably involving missing fields or values...

CVE-2006-5876

The soupheadersparse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service crash via malformed HTTP headers, probably involving missing fields or values...

CVE-2006-6767

The provided connected advisories confirm CVE-2006-6767 affects the oftpd FTP daemon, with denial of service via LPRT or LPASV commands when an unsupported address family is supplied. Affected versions are prior to 0.3.7; exploitation triggers an assertion failure that aborts the daemon, enabling...

CVE-2006-5876

CVE-2006-5876 affects libsoup’s soup_headers_parse in soup-headers.c (pre-2.2.99) and enables remote denial of service via malformed HTTP headers. The connected sources confirm a vendor patch for this issue (libsoup update to 2.2.99 and related openSUSE/SUSE advisories) and indicate a security up...

CVE-2006-6487

CVE-2006-6487: XSS in dt_guestbook 1.0f (index.php) when PHP register_globals is On. The vulnerability allows remote attackers to inject arbitrary script via the error[] parameter, enabling a reflected XSS in the victim’s browser. Affected product: dt_guestbook 1.0f; attack requires On register_g...

HTTP Response Splitting vulnerability

PMASA-2007-1 Announcement-ID: PMASA-2007-1 Date: 2007-01-16 Summary HTTP Response Splitting vulnerability Description On systems running PHP 5 before 5.1.2 or PHP 4 before 4.4.2, it is possible to trigger this vulnerability by editing the cookie containing PHP's session id. This can be used to se...

[SECURITY] [DSA 1248-1] New libsoup packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1248-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 12nd, 2007 http://www.debian.org/security/faq -...

DSA-1249-1 xfree86

Bulletin has no description...

XFree86 security update

CentOS Errata and Security Advisory CESA-2007:0002-01 Updated XFree86 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of...

Citrix Presentation Server Client wfica.ocx Buffer Overflow (CVE-2006-6334)

Citrix Presentation Server, a remote access application publishing product, is prone to a buffer overflow vulnerability. By convincing a user to visit a malicious Web page or open a malicious HTML, a remote attacker could cause the victim's system to execute arbitrary commands and take complete...