RHEL 5 : dnsmasq (RHSA-2009:1238)

An updated dnsmasq package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Dnsmasq is a lightweight and easy to configure DNS forwarder and DHCP server. Core...

[SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1876-1 [email protected] http://www.debian.org/security/ Florian Weimer September 01, 2009 http://www.debian.org/security/faq -...

dnsmasq security update

CentOS Errata and Security Advisory CESA-2009:1238 An updated dnsmasq package that fixes two security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Dnsmasq is a lightweight and easy to...

Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server

1. Advisory Information Title: Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server Advisory ID: CORE-2009-0820 Advisory URL:http://www.coresecurity.com/core-labs/advisories/dnsmasq-vulnerabilities Date published: 2009-08-31 Date of last update: 2009-08-31 Vendors contacted: Simon...

Fedora Update for claws-mail FEDORA-2007-2009

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for sylpheed FEDORA-2007-1841

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200511-01 (libgda)

The remote host is missing updates announced in advisory GLSA 200511-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: claws-mail, sylpheed-claws

The remote host is missing an update to the system as announced in the referenced advisory. VID d9867f50-54d0-11dc-b80b-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-2958

CVE-2008-2958 describes a race condition in checkinstall 1.6.1 and installwatch that allows local users to overwrite arbitrary files and potentially other effects via symlinks in temporary working directories. The affected components are the checkinstall project and the installwatch tooling; root...

Debian Security Advisory DSA 871-1 (libgda2)

The remote host is missing an update to libgda2 announced via advisory DSA 871-1. Steve Kemp discovered two format string vulnerabilities in libgda2, the GNOME Data Access library for GNOME2, which may lead to the execution of arbitrary code in programs that use this library. The old stable...

Fedora 7 : claws-mail-3.0.0-1.fc7 (2007-2009)

Mon Sep 3 2007 Andreas Bierfert - 3.0.0-1 - version upgrade - new license tag upstream switch to GPLv3+ - fix 254121 CVE-2007-2958 - Wed Aug 22 2007 Andreas Bierfert - 2.10.0-4 - new license tag - Wed Jul 18 2007 Andreas Bierfert - 2.10.0-3 - build against libSM 248675 - Mon Jul 16 2007 Andreas...

openSUSE 10 Security Update : claws-mail (claws-mail-4495)

This update fixes a format string bug in the incputerror function. This bug is triggered when error messages from the POP3 server are displayed and can be exploited remotely to execute arbitrary code. CVE-2007-2958 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE 10 Security Update : sylpheed-claws (sylpheed-claws-4511)

This update fixes a format string bug in the incputerror function. This bug is triggered when error messages from the POP3 server are displayed and can be exploited remotely to execute arbitrary code. CVE-2007-2958 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

FreeBSD : claws-mail -- POP3 Format String Vulnerability (d9867f50-54d0-11dc-b80b-0016179b2dd5)

A Secunia Advisory reports : A format string error in the 'incputerror' function in src/inc.c when displaying a POP3 server's error response can be exploited via specially crafted POP3 server replies containing format specifiers. Successful exploitation may allow execution of arbitrary code, but...

CVE-2007-2958

Format string vulnerability in the incputerror function in src/inc.c in Sylpheed 2.4.4, and Sylpheed-Claws Claws Mail 1.9.100 and 2.10.0, allows remote POP3 servers to execute arbitrary code via format string specifiers in crafted replies...

CVE-2007-2958

CVE-2007-2958 affects Sylpheed 2.4.4 and Sylpheed-Claws (Claws Mail) 1.9.100 and 2.10.0. The vulnerability is a format string issue in inc_put_error (src/inc.c) that can be triggered by crafted POP3 replies from a remote server, allowing arbitrary code execution. Public references and OpenVAS ent...

CVE-2006-2958

FilZip 3.05 is affected by a directory traversal vulnerability that lets remote attackers write arbitrary files by exploiting a .. sequence in archive members with extensions .rar, .tar, .jar, or .gz. The impact is described as potential partial integrity impact and no confidentiality or availabi...

Mandrake Linux Security Advisory : gda2.0 (MDKSA-2005:203)

Steve Kemp discovered two format string vulnerabilities in libgda2, the GNOME Data Access library for GNOME2, which may lead to the execution of arbitrary code in programs that use this library. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network...

Fedora Core 3 : libgda-1.0.4-3.1 (2005-1029)

Wed Oct 26 2005 Caolan McNamara 1:1.0.4-3.1 - CVE-2005-2958 libgda format string issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2005-2958

CVE-2005-2958 concerns the GNOME Data Access library libgda2 for GNOME2, where two format string vulnerabilities in logging routines could allow an attacker to execute arbitrary code. The issues affect libgda2 1.2.1 and earlier. Multiple OpenVAS and distribution advisories (Debian DSA-871-1, Gent...