Debian DSA-2126-1 : linux-2.6 - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2963 Kees Cook discovered an issue in the v4l 32-bit...

[SECURITY] [DSA 2126-1] New Linux 2.6.26 packages fix several issues

---------------------------------------------------------------------- Debian Security Advisory DSA-2126-1 [email protected] http://www.debian.org/security/ dann frazier November 26, 2010 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-2126-1 linux-2.6 - several issues

Bulletin has no description...

CVE-2010-3432

CVE-2010-3432 affects the Linux kernel SCTP stack: sctp_packet_config in net/sctp/output.c initializes packet data structures too aggressively in kernels before 2.6.35.6, enabling remote attackers to trigger a denial of service (panic) via a specific SCTP traffic sequence. Affected component: ker...

FreeBSD Ports: vim6, vim6+ruby

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: vim6, vim6+ruby

The remote host is missing an update to the system as announced in the referenced advisory. VID f866d2af-bbba-11df-8a8d-0008743bf21a OpenVAS Vulnerability Test $ Description: Auto generated from VID f866d2af-bbba-11df-8a8d-0008743bf21a Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD : vim6 -- heap-based overflow while parsing shell metacharacters (f866d2af-bbba-11df-8a8d-0008743bf21a)

Description for CVE-2008-3432 says : Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case. %NASLMINLEVEL 70300 C Tenabl...

CVE-2009-3432

CVE-2009-3432 affects Sun Solaris 10 and OpenSolaris (pre-sn v112) when using Xorg/Xnewt with RandR enabled. A vulnerability in xscreensaver could allow physically proximate attackers to read a locked screen via XRandR resize events. Affected patches are SunXScreensaver patches: Solaris 10 patche...

vim security update

CentOS Errata and Security Advisory CESA-2008:0617 Updated vim packages that fix various security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Vim Visual editor IMproved is an...

Moderate: Red Hat Security Advisory: vim security update

Updated vim packages that fix various security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Vim Visual editor IMproved is an updated and improved version of the vi editor. Severa...

CVE-2008-3432

Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...

CVE-2008-3432

Heap-based buffer overflow in the mchexpandwildcards function in osunix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case...

CVE-2008-3432

CVE-2008-3432 describes a heap-based overflow in Vim’s mch_expand_wildcards (os_unix.c) on Vim 6.2/6.3 that can allow remote code execution via shell metacharacters in filenames. Connected advisories (RHSA-2008:0617, Oracle Linux ELSA-2008-0617, Scientific Linux updates) confirm Vim patches exist...

CVE-2007-3432

CVE-2007-3432 is an actual vulnerability in Pluxml 0.3.1 where an unrestricted file upload in admin/images.php allows remote attackers to upload and execute arbitrary PHP code by using a .jpg filename. The NGDV/NVD entry confirms the impact as partial confidentiality, integrity, and availability ...

CVE-2006-3432

CVE-2007-0028 (not CVE-2006-3432) describes a remote code execution vulnerability in Microsoft Excel involving malformed opcodes/records that could be exploited when parsing XLS files. Affected products include Excel 2000, 2002, 2003, Excel Viewer 2003, and Office for Mac (Excel 2004 for Mac and ...

CVE-2005-3432

The CVE-2005-3432 issue affects MiniGal 2 (MG2) 0.5.1, where a remote attacker can cause listing of password-protected images by sending a request to index.php with list = * and page = all. The public sources describe the vulnerability as an information-disclosure flaw allowing access to protecte...