Mod_Perl Path_Info Remote Denial Of Service Vulnerability

According to its version number, the remote version of the Apache modperl module is prone to a remote denial-of-service vulnerability. Successful exploits may allow remote attackers to cause denial-of-service conditions on the webserver running the modperl module. OpenVAS Vulnerability Test $Id:...

MDKA-2007:128 : draklive

This update provides the version of the draklive tool that was used to build the 2008.0 live CDs. The original package in the 2008.0 repositories contained an obsolete version of the tool. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

MDKA-2007:026 : krb5

The krb5 packages provided with Mandriva Linux 2007.1 had a compilation problem where the kerberos utilities were looking for modules in the wrong location. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...

MDVA-2008:013 : skencil

The package for the drawing application Skencil contained a bug which causes it not to be able to access the system fonts correctly. Consequently, it was impossible to enter text properly in Skencil, and Skencil would consume a high level of system resources if you attempt to use the text tools...

MDKA-2007:123 : urpmi

The package included with Mandriva Linux 2008 for urpmi, the Mandriva package management tool, has regressions in the behaviour of the --src and --install-src parameters. The --install-src parameter fails to work at all. The --src parameter does not download and install the actual .src.rpm as it...

CentOS 4 / 5 : kdegraphics (CESA-2007:0729)

Updated kdegraphics packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop...

Mandriva Linux Security Advisory : tk (MDVSA-2008:041)

The ReadImage function in Tk did not check codeSize read from GIF images prior to initializing the append array, which could lead to a buffer overflow with unknown impact. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : tomcat5 (MDVSA-2009:018)

Apache Tomcat does not properly handle certain characters in a cookie value, which could possibly lead to the leak of sensitive information such as session IDs CVE-2007-5333. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:095)

A vulnerability in HSQLDB before 1.8.0.9 in OpenOffice.org could allow user-assisted remote attackers to execute arbitrary Java code via crafted database documents CVE-2007-4575. A heap overflow was discovered in OpenOffice.org's EMF parser. An attacker could create a carefully crafted EMF file...

Fedora 10 : perl-5.10.0-52.fc10 (2008-11736)

CVE-2007-4829 perl-Archive-Tar directory traversal flaws. Update of Pod::Simple with better html support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

RHEL 4 : gpdf (RHSA-2007:1025)

Updated gpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. gpdf is a GNOME-based viewer for Portable Document Format PDF files. Alin Rad Pop discover...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:226)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The tcpsacktagwritequeue function in the Linux kernel 2.6.21 through 2.6.23.7 allows remote attackers to cause a denial of service via crafted ACK responses that trigger a NULL pointer dereference CVE-2007-5501. To updat...

Mandriva Linux Security Advisory : openafs (MDVSA-2008:207)

A race condition in OpenAFS 1.3.40 through 1.4.5 allowed remote attackers to cause a denial of service daemon crash by simultaneously acquiring and giving back file callbacks CVE-2007-6599. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Securit...

Mandrake Linux Security Advisory : apache (MDKSA-2007:127)

The recallheaders function in modmemcache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously-used data, which could be used to obtain potentially sensitive information by unauthorized users. Updated packages have...

Mandriva Linux Security Advisory : krb5 (MDVSA-2008:069)

Multiple memory management flaws were found in the GSSAPI library used by Kerberos that could result in the use of already freed memory or an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5901, CVE-2007-5971. A flaw was...

Ubuntu 8.04 LTS : perl regression (USN-700-2)

USN-700-1 fixed vulnerabilities in Perl. Due to problems with the Ubuntu 8.04 build, some Perl .ph files were missing from the resulting update. This update fixes the problem. We apologize for the inconvenience. Jonathan Smith discovered that the Archive::Tar Perl module did not correctly handle...

CentOS 4 : tetex (CESA-2007:1027)

Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting...

Mandriva Linux Security Advisory : perl-Net-DNS (MDVSA-2008:073)

A vulnerability in the Net::DNS perl module was found that could allow remote attackers to cause a denial of service via a crafted DNS response. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

MDKA-2007:114 : eclipse

The Eclipse IDE provided with 2008.0 does not run, instead outputting a glibc error or JVM termination error. This update fixes that, and some other bugs in the package. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

MDKA-2007:056 : pidentd

The pidentd package had incorrect requirements that prevented it from being installed. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...