Debian DSA-1683-1 : streamripper - buffer overflow

Multiple buffer overflows involving HTTP header and playlist parsing have been discovered in streamripper CVE-2007-4337, CVE-2008-4829 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-168...

[SECURITY] [DSA 1683-1] New streamripper packages fix potential code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1683-1 [email protected] http://www.debian.org/security/ Florian Weimer December 08, 2008 http://www.debian.org/security/faq -...

DSA-1683-1 streamripper - potential code execution

Bulletin has no description...

CVE-2008-4337

CVE-2008-4337 is an XSS vulnerability in Bitweaver 2.0.2. The provided documents describe multiple vectors: arbitrary script/HTML injection via URL parameters across numerous pages (articles/edit/list; blogs/list_blogs/rankings; calendar and events pages; fisheye galleries; liberty/list_content; ...

Gentoo Security Advisory GLSA 200609-13 (gzip)

The remote host is missing updates announced in advisory GLSA 200609-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200611-24 (lha)

The remote host is missing updates announced in advisory GLSA 200611-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200709-03 (streamripper)

The remote host is missing updates announced in advisory GLSA 200709-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200609-13 (gzip)

The remote host is missing updates announced in advisory GLSA 200609-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200611-24 (lha)

The remote host is missing updates announced in advisory GLSA 200611-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: gzip

The remote host is missing an update to the system as announced in the referenced advisory. VID 11a84092-8f9f-11db-ab33-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: gzip

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SAP DB / MaxDB Cons Program Arbitrary Command Execution

Binary data 4337.prm...

SuSE 10 Security Update : gzip (ZYPP Patch Number 2085)

This update fixes several security problems that can be exploited to compromise the system in conjunction with other programs while processing malformated archive files. CVE-2006-4334 / CVE-2006-4335 / CVE-2006-4336 / CVE-2006-4337 / CVE-2006-4338 %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE 10 Security Update : gzip (gzip-2084)

This update fixes several security problems that can be exploited to compromise the system in conjunction with other programs while processing malformated archive files. CVE-2006-4334,CVE-2006-4335,CVE-2006-4336,CVE-2006-4337,CVE -2006-4338 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2007-4337

Multiple buffer overflows in the httplibparsescheader function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbitrary code via long 1 Location and 2 Server HTTP headers, a different vulnerability than CVE-2006-3124...

CVE-2007-4337

CVE-2007-4337 describes multiple buffer overflows in Streamripper’s httplib_parse_sc_header() in lib/http.c, allowing remote code execution via crafted long HTTP headers (Location and Server). Affected software: Streamripper prior to version 1.62.2. Root cause: buffer overflows in header parsing....

CVE-2007-4337

Multiple buffer overflows in the httplibparsescheader function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to execute arbitrary code via long 1 Location and 2 Server HTTP headers, a different vulnerability than CVE-2006-3124...

Fedora Core 5 : lha-1.14i-20 (2007-557)

Thu May 31 2007 Tomas Smetana - 1.14i-20 - fix 220596 CVE-2006-4335/7/8 multiple vulnerabilities in lha Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Security fix for the ALT Linux 6 package lha version 2:1.14i-alt2

April 15, 2007 Michael Shigorin 2:1.14i-alt2 - ac20050924p1: security fixes for CVE-2006-4335, CVE-2006-4337, CVE-2006-4338 DoS, system access - removed patch1, patch2, patch4, patch5 didn't apply...

Mandrake Linux Security Advisory : gzip (MDKSA-2006:167)

NULL Dereference CVE-2006-4334 A stack modification vulnerability where a stack buffer can be modified out of bounds, but not in the traditional stack overrun sense exists in the LZH decompression support of gzip. CVE-2006-4335 A .bss buffer underflow exists in gzip's pack support, where a loop...