Input validation

Ipswitch WSFTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the 1 iFTPAddU or 2 iFTPAddH file, or to a 3 edition module...

CVE-2007-0666

Ipswitch WSFTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the 1 iFTPAddU or 2 iFTPAddH file, or to a 3 edition module...

USN-371-1: Ruby vulnerability

An error was found in Ruby's CGI library that did not correctly check for the end of multipart MIME requests. Using a crafted HTTP request, a remote user could cause a denial of service, where Ruby CGI applications would end up in a loop, monopolizing a CPU...

USN-356-1: gdb vulnerability

Will Drewry, of the Google Security Team, discovered buffer overflows in GDB's DWARF processing. This would allow an attacker to execute arbitrary code with user privileges by tricking the user into using GDB to load an executable that contained malicious debugging information...

[Full-disclosure] [USN-347-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-347-1 September 18, 2006 linux-source-2.6.10/-2.6.12/-2.6.15 vulnerabilities CVE-2006-4535, CVE-2006-4538 =========================================================== A security issue affects the following Ubunt...

[USN-336-1] binutils vulnerability

=========================================================== Ubuntu Security Notice USN-336-1 August 16, 2006 binutils vulnerability http://bugs.gentoo.org/showbug.cgi?id=99464 =========================================================== A security issue affects the following Ubuntu releases: Ubunt...

USN-337-1: imagemagick vulnerability

Damian Put discovered a buffer overflow in imagemagick's SGI file format decoder. By tricking an user or automated system into processing a specially crafted SGI image, this could be exploited to execute arbitrary code with the user's privileges...

USN-336-1: binutils vulnerability

A buffer overflow was discovered in gas the GNU assembler. By tricking an user or automated system like a compile farm into assembling a specially crafted source file with gcc or gas, this could be exploited to execute arbitrary code with the user's privileges...

[Full-disclosure] [USN-328-1] Apache vulnerability

=========================================================== Ubuntu Security Notice USN-328-1 July 27, 2006 apache2 vulnerability CVE-2006-3747 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.10 Ubuntu 6.06 LT...

[USN-297-3] Thunderbird vulnerabilities

=========================================================== Ubuntu Security Notice USN-297-3 July 26, 2006 mozilla-thunderbird vulnerabilities CVE-2006-2775, CVE-2006-2776, CVE-2006-2778, CVE-2006-2779, CVE-2006-2780, CVE-2006-2781, CVE-2006-2783, CVE-2006-2784, CVE-2006-2787...

USN-320-2: php4 regression

USN-320-2 fixed several vulnerabilities in PHP. James Manning discovered that the Ubuntu 5.04 update introduced a regression, the function tempnam caused a crash of the PHP interpreter in some circumstances. The updated packages fix this. We apologize for the inconvenience...

USN-297-3: Thunderbird vulnerabilities

USN-297-1 fixed several vulnerabilities in Thunderbird for the Ubuntu 6.06 LTS release. This update provides the corresponding fixes for Ubuntu 5.04 and Ubuntu 5.10. For reference, these are the details of the original USN: Jonas Sicking discovered that under some circumstances persisted XUL...

USN-308-1: shadow vulnerability

Ilja van Sprundel discovered that passwd, when called with the -f, -g, or -s option, did not check the result of the setuid call. On systems that configure PAM limits for the maximum number of user processes, a local attacker could exploit this to execute chfn, gpasswd, or chsh with root...

[USN-301-1] kdm vulnerability

=========================================================== Ubuntu Security Notice USN-301-1 June 14, 2006 kdebase vulnerability CVE-2006-2449 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.04 Ubuntu 5.10 Ubuntu 6.06 LT...

USN-295-1: xine-lib vulnerability

Federico L. Bossi Bonin discovered a buffer overflow in the HTTP input module. By tricking an user into opening a malicious remote media location, a remote attacker could exploit this to crash Xine library frontends like totem-xine, gxine, or xine-ui and possibly even execute arbitrary code with...

USN-292-1: binutils vulnerability

CVE-2006-2362 Jesus Olmos Gonzalez discovered a buffer overflow in the Tektronix Hex Format TekHex backend of the BFD library, such as used by the 'strings' utility. By tricking an user or automated system into processing a specially crafted file with 'strings' or a vulnerable third-party...

USN-288-1: PostgreSQL server/client vulnerabilities

CVE-2006-2313: Akio Ishida and Yasuo Ohgaki discovered a weakness in the handling of invalidly-encoded multibyte text data. If a client application processed untrusted input without respecting its encoding and applied standard string escaping techniques such as replacing a single quote '''''''...

USN-283-1: MySQL vulnerabilities

Stefano Di Paola discovered an information leak in the login packet parser. By sending a specially crafted malformed login packet, a remote attacker could exploit this to read a random piece of memory, which could potentially reveal sensitive data. CVE-2006-1516 Stefano Di Paola also found a...

USN-280-1: X.org server vulnerability

The Render extension of the X.org server incorrectly calculated the size of a memory buffer, which led to a buffer overflow. A local attacker could exploit this to crash the X server or even execute arbitrary code with root privileges...

[Full-disclosure] [USN-281-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-281-1 May 04, 2006 linux-source-2.6.10, linux-source-2.6.12 vulnerabilities CVE-2006-0557, CVE-2006-1052, CVE-2006-1055, CVE-2006-1066, CVE-2006-1242, CVE-2006-1343, CVE-2006-1368, CVE-2006-1525...