CVE-2007-4997

CVE-2007-4997 affects the Linux kernel 2.6.x, including components in net/ieee80211/ieee80211_rx.c, where an off-by-two integer underflow in ieee80211_rx can crash the kernel when a runt IEEE 802.11 frame with the IEEE80211_STYPE_QOS_DATA flag is used. Impact is remote denial of service (kernel c...

CVE-2007-4997

Integer underflow in the ieee80211rx function in net/ieee80211/ieee80211rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service crash via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211STYPEQOSDATA flag is set, aka an "off-by-two...

CVE-2007-5838

CVE-2007-5838 affects Symantec Altiris Deployment Solution 6.x prior to 6.8.380.0. A local privilege escalation is possible because a local user can gain SYSTEM privileges via the browser option “Enable key-based authentication to Deployment server.” The description notes this is a different issu...

CVE-2007-5839

CVE-2007-5839 affects BitchX 1.1a: the e_hostname function in commands.c allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command. Root cause described as insecure temporary-file creation (tmpnam). Impact stated: lo...

SiteBar: Multiple issues

Background SiteBar is a PHP application that allows users to store their bookmarks on a web server. Description Tim Brown discovered these multiple issues: the translation module does not properly sanitize the value to the "dir" parameter CVE-2007-5491, CVE-2007-5694; the translation module also...

Fedora 7 : liferea-1.2.23-4.fc7 (2007-2725)

Added patch to fix weak permission in feedlist.opml backup file. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora Core 6 : flac-1.1.2-28 (2007-730)

Wed Oct 17 2007 - Bastien Nocera - 1.1.2-28 - Add patch from Takashi Iwai to fix CVE-2007-4619 332581 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : file-4.21-1.fc7 (2007-0836)

Update to new upstream 4.21 should also fix CVE-2007-2799 file integer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 7 : lighttpd-1.4.18-1.fc7 (2007-2132)

Lighttpd 1.4.17 and earlier is prone to a header overflow when using the modfastcgi extension, this can lead to arbitrary code execution in the fastcgi application. This 1.4.18 update fixes the issue. Note that Tenable Network Security has extracted the preceding description block directly from t...

Fedora 7 : kernel-2.6.22.9-91.fc7 (2007-2349)

Update to Linux 2.6.22.8 and 2.6.22.9: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.8 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.9 CVE-2007-4571 The sndmemprocread function in sound/core/memalloc.c in the Advanced Linux Sound Architecture ALSA in the Linux kernel...

Fedora 7 : id3lib-3.8.3-17.fc7 (2007-1774)

This security update fixes a minor tempfile creation security issue CVE-2007-4460 by using mkstemp bugzilla 253553 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

Fedora 7 : quagga-0.99.9-1.fc7 (2007-2196)

This update should fix CVE-2007-4826 quagga bgpd DoS. For more info see rhbz285691. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 7 : ruby-1.8.6.110-1.fc7 (2007-2406)

Thu Oct 4 2007 Akira TAGOH - 1.8.6.110-1 - New upstream release. - ruby-r12567.patch: removed. - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is insufficient verification of SSL certificate. 313791 - Wed Jul 25 2007 Akira TAGOH - 1.8.6.36-3 - ruby-r12567.patch: backport patch...

Fedora 7 : cpio-2.6-28.fc7 (2007-2744)

Fri Nov 2 2007 Radek Brich 2.6-28 - patch for CVE-2007-4476 stack crashing in safernamesuffix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 7 : python-2.5-14.fc7 (2007-2663)

This update fixes: Multiple integer overflows in the imageop module 295971 Also included are a dependency fix on binutils 307221, so the ctypes module works, and a tkinter fix when dealing with zero length text in some widgets 281751. Note that Tenable Network Security has extracted the preceding...

Fedora 7 : seamonkey-1.1.5-1.fc7 (2007-2601)

SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. By leveraging browser flaws, users could be fooled into possibly surrendering sensitive information CVE-2007-1095, CVE-2007-3511, CVE-2007-3844, CVE-2007-5334. Malformed web content cou...

Fedora 7 : httpd-2.2.4-4.1.fc7 (2007-0704)

The Apache HTTP Server did not verify that a process was an Apache child process before sending it signals. A local attacker with the ability to run scripts on the Apache HTTP Server could manipulate the scoreboard and cause arbitrary processes to be terminated which could lead to a denial of...

Fedora 7 : balsa-2.3.17-2.fc7 (2007-1447)

Balsa is not really listed in the list but it also lacked the verification of the server challenge. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : pam_ssh-1.92-2.fc7 (2007-1793)

Thu Aug 23 2007 Patrice Dumas 1.92-2 - update to 1.92 - Fix 253959, CVE-2007-0844 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Core 6 : ruby-1.8.5.114-1.fc6 (2007-738)

This release contains another fixes of CVE-2007-5162 for Net::FTPTLS, Net::Telnet and Net::IMAP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...