USN-208-1: graphviz vulnerability

Javier Fernández-Sanguino Peña discovered that the "dotty" tool created and used temporary files in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the privileges of the user running dotty...

USN-203-1: Abiword vulnerabilities

Chris Evans discovered several buffer overflows in the RTF import module of AbiWord. By tricking a user into opening an RTF file with specially crafted long identifiers, an attacker could exploit this to execute arbitrary code with the privileges of the AbiWord user...

USN-202-1: KOffice vulnerability

Chris Evans discovered a buffer overflow in the RTF import module of KOffice. By tricking a user into opening a specially-crafted RTF file, an attacker could exploit this to execute arbitrary code with the privileges of the AbiWord user...

[Full-disclosure] [USN-198-1] cfengine vulnerabilities

=========================================================== Ubuntu Security Notice USN-198-1 October 10, 2005 cfengine vulnerabilities CAN-2005-2960, CAN-2005-3137 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty...

USN-155-3: Fixed mozilla locale packages

USN-155-3 and USN-186-3 updated the version of the mozilla-browser package to fix several vulnerabilities. It was determined that this rendered the Dansk, German, and French locale packages uninstallable since their dependencies were too specific. The updated locale packages work with all present...

USN-192-1: Squid vulnerability

Mike Diggins discovered a remote Denial of Service vulnerability in Squid. Sending specially crafted NTML authentication requests to Squid caused the server to crash...

USN-188-1: AbiWord vulnerability

Chris Evans discovered a buffer overflow in the RTF import module of AbiWord. By tricking a user into opening an RTF file with specially crafted long identifiers, an attacker could exploit this to execute arbitrary code with the privileges of the AbiWord user...

USN-187-1: Linux kernel vulnerabilities

A Denial of Service vulnerability was detected in the stack segment fault handler. A local attacker could exploit this by causing stack fault exceptions under special circumstances scheduling, which lead to a kernel crash. CAN-2005-1767 Vasiliy Averin discovered a Denial of Service vulnerability ...

USN-185-1: CUPS vulnerability

A flaw was detected in the printer access control list checking in the CUPS server. Printer names were compared in a case sensitive manner; by modifying the capitalization of printer names, a remote attacker could circumvent ACLs and print to printers he should not have access to. The Ubuntu 5.04...

USN-183-1: Squid vulnerabilities

A Denial of Service vulnerability was discovered in the handling of aborted requests. A remote attacker could exploit this to crash Squid by sending specially crafted requests. CAN-2005-2794 Alex Masterov discovered a Denial of Service vulnerability in the sslConnectTimeout function. By sending...

USN-180-1: MySQL vulnerability

AppSecInc Team SHATTER discovered a buffer overflow in the "CREATE FUNCTION" statement. By specifying a specially crafted long function name, a local or remote attacker with function creation privileges could crash the server or execute arbitrary code with server privileges. However, the right to...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service /------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2...

[Full-disclosure] [USN-182-1] X server vulnerability

=========================================================== Ubuntu Security Notice USN-182-1 September 12, 2005 xorg, xfree86 vulnerabilities CAN-2005-2495 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog...

USN-178-1: Linux kernel vulnerabilities

Oleg Nesterov discovered a local Denial of Service vulnerability in the timer handling. When a non group-leader thread called exec to execute a different program while an itimer was pending, the timer expiry would signal the old group leader task, which did not exist any more. This caused a kerne...

USN-173-2: PCRE vulnerability

USN-173-1 fixed a buffer overflow vulnerability in the PCRE library. However, it was determined that this did not suffice to prevent all possible overflows, so another update is necessary. In addition, it was found that the Ubuntu 4.10 version of Apache 2 contains a static copy of the library cod...

USN-172-1: lm-sensors vulnerability

Javier Fernández-Sanguino Peña noticed that the pwmconfig script created temporary files in an insecure manner. This could allow a symlink attack to create or overwrite arbitrary files with full root privileges since pwmconfig is usually executed by root...

[USN-169-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-169-1 August 19, 2005 linux-source-2.6.8.1, linux-source-2.6.10 vulnerabilities CAN-2005-2098, CAN-2005-2456, CAN-2005-2457, CAN-2005-2458, CAN-2005-2459, CAN-2005-2548, CAN-2005-2555...

USN-168-1: Gaim vulnerabilities

Daniel Atallah discovered a Denial of Service vulnerability in the file transfer handler of OSCAR the module that handles various instant messaging protocols like ICQ. A remote attacker could crash the Gaim client of an user by attempting to send him a file with a name that contains invalid UTF-8...

USN-167-1: AWStats vulnerability

Peter Vreugdenhil discovered a command injection vulnerability in AWStats. As part of the statistics reporting function, AWStats displays information about the most common referrer values that caused users to visit the website. Referer URLs could be crafted in a way that they contained arbitrary...

USN-166-1: Evolution vulnerabilities

Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this...