Security fix for the ALT Linux 5 package fetchmail version 6.3.8-alt4

Sept. 5, 2007 Michael Shigorin 6.3.8-alt4 - added patch from fetchmail-SA-2007-02 fixing CVE-2007-4565: NULL pointer dereference trigged by outside circumstances...

Fedora Core 6 : fetchmail-6.3.6-3.fc6 (2007-689)

Mon Sep 3 2007 Vitezslav Crhonek - 6.3.6-3 - Fix license - Fix fetchmail NULL pointer dereference CVE-2007-4565 Resolves: 260881 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

CVE-2007-4565

CVE-2007-4565 affects fetchmail: sink.c has a NULL dereference when warning messages are rejected by a remote SMTP server, causing denial of service. Public records in 2009 advisories (RHSA-2009:1427 and derivatives) indicate updated fetchmail packages fix multiple issues, including CVE-2007-4565...

Linux kernel ptrace privilege elevation vulnerability

Added: 06/27/2007 CVE: CVE-2003-0127 BID: 7112 OSVDB: 4565 Background ptrace is a Linux system call which enables a parent process to observe and control another process. Problem Due to a failure by the kernel to restrict trace permissions, a local attacker could gain root privileges by attaching...

Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2006:169)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 1.5.0.7. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Fedora Core 5 : firefox-1.5.0.7-1.fc5 (2006-976)

Mozilla Firefox is an open source Web browser. Two flaws were found in the way Firefox processed certain regular expressions. A malicious web page could crash the browser or possibly execute arbitrary code as the user running Firefox. CVE-2006-4565, CVE-2006-4566 A number of flaws were found in...

[SECURITY] [DSA 1210-1] New Mozilla Firefox packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1210-1 [email protected] http://www.debian.org/security/ Martin Schulze November 14th, 2006 http://www.debian.org/security/faq -...

Debian DSA-1191-1 : mozilla-thunderbird - several vulnerabilities

Several security related problems have been discovered in Mozilla and derived products such as Mozilla Thunderbird. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-2788 Fernando Ribeiro discovered that a vulnerability in the getRawDER functio...

USN-361-1: Mozilla vulnerabilities

Various flaws have been reported that allow an attacker to execute arbitrary code with user privileges by tricking the user into opening a malicious URL. CVE-2006-2788, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3809, CVE-2006-3811, CVE-2006-4565, CVE-2006-4568, CVE-2006-4571 A bug was...

[SECURITY] [DSA 1192-1] New Mozilla packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1192-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1191-1] New Mozilla Thunderbird packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1191-1 [email protected] http://www.debian.org/security/ Martin Schulze October 5th, 2006 http://www.debian.org/security/faq -...

CentOS 4 : thunderbird (CESA-2006:0677)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Two flaws were found in...

seamonkey security update

CentOS Errata and Security Advisory CESA-2006:0676-01 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...

Mozilla Thunderbird < 1.5.0.7 Multiple Vulnerabilities

The remote version of Mozilla Thunderbird suffers from various security issues, at least one of which could lead to execution of arbitrary code on the affected host subject to the user's privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22370;...

CVE-2006-4565

CVE-2006-4565 is a vulnerability in Mozilla-related products (Firefox/SeaMonkey/Thunderbird) tied to processing of certain JavaScript regular expressions. The root cause is flaws in handling specific regular expressions, which could crash the application or allow arbitrary code execution. Public ...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2006:0676)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

RHEL 4 : firefox (RHSA-2006:0675)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2006:0675 advisory. Mozilla Firefox is an open source Web browser. Two flaws were found in the way Firefox processed certain regular expressions. A malicious we...

RHEL 4 : thunderbird (RHSA-2006:0677)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Two flaws were found in...

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...