Debian DSA-1454-1 : freetype - integer overflow

Greg MacManus discovered an integer overflow in the font handling of libfreetype, a FreeType 2 font engine, which might lead to denial of service or possibly the execution of arbitrary code if a user is tricked into opening a malformed font. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-4802)

This update of OpenOfficeorg adds restrictions to SQL statements of Java-based databases to avoid the execution of native Jave code by creating procedures. CVE-2007-4575 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

RHEL 2.1 / 3 / 4 / 5 : e2fsprogs (RHSA-2008:0003)

Updated e2fsprogs packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The e2fsprogs packages contain a number of utilities for creating, checking, modifying,...

MS08-001: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)

The remote version of Windows contains a version of the TCP/IP protocol that does not properly parse IGMPv3, MLDv2 and ICMP structure. An attacker may exploit these flaws to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29893;...

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow

Microsoft DirectX SAMI File Parsing - Remote Stack Overflow !/usr/bin/python Bug discovered by Jun Mao of VeriSign iDefense https://www.securityfocus.com/bid/26789 CVE-2007-3901 Coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Tested on: Windows 2000 SP4 English...

[SECURITY] [DSA 1454-1] New freetype packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1454-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 07, 2008 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: e2fsprogs security update

Updated e2fsprogs packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The e2fsprogs packages contain a number of utilities for creating, checking, modifying,...

[SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1453-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 07, 2008 http://www.debian.org/security/faq -...

Moderate: e2fsprogs security update

1.32-15.4 - Fix integer overflows 414611 / CVE-2007-5497...

Mort Bay Jetty URL Multiple Slash Character Information Disclosure

The remote instance of Mort Bay Jetty allows an attacker to view static content in WEB-INF and behind security constraints because of the approach it uses to compact URLs like '/foo///bar'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Debian DSA-1449-1 : loop-aes-utils - programming error

It was discovered that loop-aes-utils, tools for mounting and manipulating filesystems, didn't drop privileged user and group permissions in the correct order in the mount and umount commands. This could potentially allow a local user to gain additional privileges. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-1451-1 : mysql-dfsg-5.0 - several vulnerabilities

Several local/remote vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3781 It was discovered that the privilege validation for the source table of CREATE TABLE LIKE statements was...

Debian DSA-1447-1 : tomcat5.5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3382 It was discovered that single quotes ' in cookies were treated as a delimiter, which could lead to an...

MS07-063: Vulnerability in SMBv2 Could Allow Remote Code Execution (942624) (uncredentialed check)

The remote version of Windows contains a version of SMBv2 Server Message Block protocol that is affected by several vulnerabilities. An attacker may exploit these flaws to elevate his privileges and gain control of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...

AOL Radio AmpX ActiveX Control Buffer Overflow (CVE-2007-5755)

AOL Radio is a free online radio service provided by America Online. Multiple buffer overflow vulnerabilities exist in AOL Radio. These vulnerabilities are due to boundary errors in the AOL Radio AmpX ActiveX Control. To trigger this issue, an attacker may create a malicious web page that will...

ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow

ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow ''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet [email protected] we own dsize in readdesc, src + dsize, exesectionsi + 1.rsz != exesectionsi + 1.rsz exploited with randomizevaspace = 0 ''' import struct exe=...

ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow

''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet [email protected] we own dsize in readdesc, src + dsize, exesectionsi + 1.rsz != exesectionsi + 1.rsz exploited with randomizevaspace = 0 ''' import struct exe=...

DSA-1453-1 tomcat5 - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1452-1] New wzdftpd packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1452-1 [email protected] http://www.debian.org/security/ Steve Kemp January 06, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1451-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1451-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 06, 2008 http://www.debian.org/security/faq -...