SDL_Image 1.2.6 and prior GIF handling buffer overflow

Name : SDLImage 1.2.6 and prior GIF handling buffer overflow Type : Remote DoS / Code Execution ? Impact : Low / Medium ? Credits : Gynvael Coldwind / Team Vexillium Discovered: 2007-12-17 Published : 2008-01-23 Brief SDLImage is an open source library providing image file handling functionality...

PHP 5.2.5 cURL safe_mode bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.2.5 cURL safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 SecurityReason Date: - - Written: 21.08.2007 - - Public: 22.01.2008 SecurityReason Research SecurityAlert Id: 51 CVE: CVE-2007-4850 SecurityRisk: Medium Affected Software: PHP 5.2....

[SECURITY] [DSA 1444-2] New php5 packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1444-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 23, 2008 http://www.debian.org/security/faq -...

CVE-2007-6425

CVE-2007-6425 applies to HP-UX B.11.31 running ARPA Transport, where a remote attacker could cause a Denial of Service. HP’s Security Bulletin HPSBUX02306 rev.1 (and related rev.2) confirms the affected version and provides a patch (UNOF_37676.depot) to resolve the vulnerability; patch installati...

[SECURITY] [DSA 1473-1] New scponly packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1473 [email protected] http://www.debian.org/security/ Florian Weimer January 21, 2008 http://www.debian.org/security/faq -...

HP-UX PHSS_37225 : HP-UX Running X Font Server (xfs) Software, Remote Execution of Arbitrary Code (HPSBUX02303 SSRT071468 rev.1)

s700800 11.23 X Font Server Patch : A potential security vulnerability has been identified with HP-UX running the X Font Server xfs. The vulnerability could be exploited remotely to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks ...

CentOS 3 : wireshark (CESA-2008:0059)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known ...

[SECURITY] [DSA 1473-1] New scponly packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1473 [email protected] http://www.debian.org/security/ Florian Weimer January 21, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1466-3] New xfree86 packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1466-3 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 21, 2008 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: wireshark security update

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known ...

Fedora 7 : syslog-ng-2.0.7-1.fc7 (2008-0559)

Contains a security fix for CVE-2007-6437/ZSA-2007-029 DoS Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 8 : syslog-ng-2.0.7-1.fc8 (2008-0523)

Contains a security fix for CVE-2007-6437/ZSA-2007-029 DoS Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

RHEL 3 : wireshark (RHSA-2008:0059)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously known ...

[SECURITY] [DSA 1470-1] New horde3 packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1470-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 20, 2008 http://www.debian.org/security/faq -...

DSA-1473-1 scponly - arbitrary code execution

Bulletin has no description...

SuSE 10 Security Update : X11 libs and server (ZYPP Patch Number 4860)

This update fixes various Xserver security issues. File existence disclosure vulnerability. CVE-2007-5958 XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. EVI Extension Integer Overflow Vulnerability...

RHEL 4 / 5 : wireshark (RHSA-2008:0058)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously...

Fedora 8 : e2fsprogs-1.40.2-12.fc8 (2007-4447)

This update fixes : - Bug 414581 - CVE-2007-5497 e2fsprogs multiple integer overflows F8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Debian DSA-1467-1 : mantis - several vulnerabilities

Several remote vulnerabilities have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-6574 Custom fields were not appropriately protected by per-item access control, allowing for sensitive da...

Fedora 7 : cairo-1.4.14-1.fc7 (2007-3818)

The latest stable upstream release of cairo fixes a number of memory handling errors, rendering errors, and contains some optimizations. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...