[SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation

---------------------------------------------------------------------- Debian Security Advisory DSA-1494-1 [email protected] http://www.debian.org/security/ Florian Weimer February 11, 2008 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1494-1 [email protected] http://www.debian.org/security/ Florian Weimer February 11, 2008 http://www.debian.org/security/faq -...

CVE-2007-0994

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an 1 img, 2 link, or 3 style tag, which...

Design/Logic Flaw

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an 1 img, 2 link, or 3 style tag, which...

CVE-2007-0994

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an 1 img, 2 link, or 3 style tag, which...

CVE-2007-1178

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...

security flaw

Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required accessok checks, which allows local users to read arbitrary kernel memory on 64-bit systems signal64.c and cause a denial of service crash and possibly read kernel memory on 32-bit systems...

Code injection

Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required accessok checks, which allows local users to read arbitrary kernel memory on 64-bit systems signal64.c and cause a denial of service crash and possibly read kernel memory on 32-bit systems...

CVE-2003-0683

CVE-2003-0683 refers to an SGI IRIX NFS export (/etc/exports) issue where configuration entries using wildcards without explicit hostnames or groups can bypass access checks, potentially allowing unintended access. The vulnerability affects SGI IRIX 6.5.x (notably 6.5.21m/6.5.21f according to his...

Wildcard exportfs issue in NFS on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: Wildcard exportfs issue in NFS Number: 20031004-01-P Date: October, 28 2003 Reference: SGI BUG 902105 Reference: CVE CAN-2003-0683 Fixed in: Future release of IRIX or patches 5351 and 5352 SGI provides this information freely to the...