openSUSE Security Update : gvim (gvim-561)

The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...

CVE-2008-6235

CVE-2008-6235 affects Vim 7.0/7.1 through the netrw.vim plugin, which allows command execution via shell metacharacters in filenames used by the D (delete) command or b:netrw_curdir. Exploitation could lead to arbitrary code execution. Public fixes exist (e.g., advisories RHSA-2008:0580 and OpenS...

Gentoo Security Advisory GLSA 200612-03 (gnupg)

The remote host is missing updates announced in advisory GLSA 200612-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3675

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6235...

Debian Security Advisory DSA 1231-1 (gnupg)

The remote host is missing an update to gnupg announced via advisory DSA 1231-1. Several remote vulnerabilities have been discovered in the GNU privacy, a free PGP replacement, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the...

SuSE 10 Security Update : gpg2 (ZYPP Patch Number 2354)

Specially crafted files could overflow a buffer when gpg2 was used in interactive mode. CVE-2006-6169 - Specially crafted files could modify a function pointer and execute code this way. CVE-2006-6235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

CVE-2007-6235

The CVE-2007-6235 issue concerns RealNetworks RealPlayer 11, specifically an ActiveX control that can be abused by a malformed .au file to trigger a divide-by-zero error, leading to an application crash (DoS). This is a remote-access vulnerability via a crafted multimedia file; the available conn...

Ubuntu 6.10 : gnupg2 vulnerabilities (USN-393-2)

USN-389-1 and USN-393-1 fixed vulnerabilities in gnupg. This update provides the corresponding updates for gnupg2. A buffer overflow was discovered in GnuPG. By tricking a user into running gpg interactively on a specially crafted message, an attacker could execute arbitrary code with the user's...

openSUSE 10 Security Update : gpg (gpg-2353)

Specially crafted files could overflow a buffer when gpg2 was used in interactive mode CVE-2006-6169. - Specially crafted files could modify a function pointer and execute code this way CVE-2006-6235. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE 10 Security Update : gpg2 (gpg2-2352)

Specially crafted files could overflow a buffer when gpg2 was used in interactive mode CVE-2006-6169. - Specially crafted files could modify a function pointer and execute code this way CVE-2006-6235. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE 10 Security Update : gpg (gpg-2388)

Specially crafted files could overflow a buffer when gpg was used in interactive mode CVE-2006-6169. - Specially crafted files could modify a function pointer and execute code this way CVE-2006-6235. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Fedora Core 5 : gnupg-1.4.6-1 (2006-1405)

This update upgrades GnuPG to version 1.4.6, incorporating fixes for a potential buffer overflow CVE-2006-6169 and referencing of a stack variable after it passes out of scope CVE-2006-6235. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Important gnupg security update

1.2.6-8 - incorporate patch from Werner to fix use of stack variable after it goes out of scope CVE-2006-6235, 218480 1.2.6-7 - add patch for overflow in openfile.c from Werner's mail CVE-2006-6169...

[slackware-security] gnupg [resigned]

Hello, As many people have pointed out, the last advisory SSA:2006-340-01 was not signed with the usual Slackware Security Team key fingerprint 40102233. I did some reconfiguration on the box that does the distribution signing and it had some unintended side-effects. :-/ Several CHECKSUMS.md5.asc...

gnupg security update

CentOS Errata and Security Advisory CESA-2006:0754-01 Updated GnuPG packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GnuPG is a utility for encrypting data and creating digital signatures...

GnuPG: remotely controllable function pointer [CVE-2006-6235]

GnuPG: remotely controllable function pointer CVE-2006-6235 =============================================================== 2006-12-04 Summary ======= Tavis Ormandy of the Gentoo security team identified a severe and exploitable bug in the processing of encrypted packets in GnuPG. Please do not...

[slackware-security] gnupg

New gnupg packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about the issues may be found here: http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html https://vulners.com/cve/CVE-2006-6235 https://vulners.com/cve/CVE-2006-61...