[SECURITY] [DSA 1624-1] New libxslt packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2008 http://www.debian.org/security/faq -...

Afuse afuse.c文件Shell命令注入漏洞

BUGTRAQ ID: 30245 CVECAN ID: CVE-2008-2232 Afuse是使用FUSE在用户域实现的自动加载文件系统。 Afuse没有正确地过滤文件名便将其用在了system调用中。如果能够读访问afuse文件系统的攻击者使用了类似于以下的路径的话： /path/";arbitrary command;" /path/arbitrary command 则从注册为Afuse加载的目录请求上述特制文件就会导致以提升的权限执行任意命令。 Jacob Bower Afuse 0.2 Debian ------...

[SECURITY] [DSA 1598-1] New libtk-img packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1598-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 19, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1587-1] New mtr packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1587-1 [email protected] http://www.debian.org/security/ Steve Kemp May 26, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 1584-1] New libfissound packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1584-1 [email protected] http://www.debian.org/security/ Steve Kemp May 21, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

MPlayer sdpplin_parse()函数RTSP整数溢出漏洞

BUGTRAQ ID: 28851 CVECAN ID: CVE-2008-1558 MPlayer是一款基于Linux的媒体播放程序，支持多种媒体格式。 MPlayer的stream/realrtsp/sdpplin.c文件中的sdpplinparse函数存在整数溢出漏洞： sdpplinparsestream desc-streamid=atoibuf; spplinparse desc-streamstream-streamid=stream; 如果用户所打开的媒体文件中包含有超长的StreamCount SDP参数的话，就可以触发这个溢出，导致执行任意指令。 MPlayer 1....

Xpdf嵌入字体处理代码执行漏洞

BUGTRAQ ID: 28830 CVECAN ID: CVE-2008-1693 Xpdf是便携文档格式（PDF）文件的开放源码查看器。 Xpdf显示PDF文件中所嵌入的畸形字体的方式存在漏洞，攻击者可以创建恶意的PDF文件，如果打开了该文件就会导致Xpdf崩溃或执行任意指令。 Xpdf 3.x Debian ------ Debian已经为此发布了一个安全公告（DSA-1548-1）以及相应补丁: DSA-1548-1：New xpdf packages fix arbitrary code exitution...

Fedora 8 : libtirpc-0.1.7-15.fc8 (2008-1017)

Thu Jan 24 2008 Steve Dickson 0.1.7-15 - Protect from buffer overflow in the GSS code. bz 362121 - Mon Dec 17 2007 Steve Dickson 0.1.7-14 - Fixed typo in /etc/netconfig file bz 414471 - Thu Oct 25 2007 Steve Dickson 0.1.7-13 - Added a check for the ARM arch bz 351071 Note that Tenable Network...

[SECURITY] [DSA 1499-1] New pcre3 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1499-1 [email protected] http://www.debian.org/security/ Florian Weimer February 19, 2008 http://www.debian.org/security/faq -...

apt-listchanges不安全路径库导入本地SHELL代码执行漏洞

apt-listchanges是一款使用当前安装来对比新版本的工具。 apt-listchanges当导入部分库的时候使用不安全路径，本地攻击者可以利用漏洞以应用程序进程权限执行任意SHELL代码。 目前没有详细漏洞细节提供。 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32...

[SECURITY] [DSA 1470-1] New horde3 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1470-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 20, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 456-1 (kernel)

The remote host is missing an update to kernel-source-2.2.19, kernel-patch-2.2.19-arm, kernel-image-2.2.19-netwinder, kernel-image-2.2.19-riscpc announced via advisory DSA 456-1. OpenVAS Vulnerability Test $Id: deb4561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from...

Debian Security Advisory DSA 947-2 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 947-2. A heap overflow has been discovered in ClamAV, a virus scanner, which could allow an attacker to execute arbitrary code by sending a carefully crafted UPX-encoded executable to a system runnig ClamAV. In addition,...

Debian: Security Advisory (DSA-495)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-456)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1462-1] New hplip packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1462-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 13, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1443-1] New tcpreen packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1443-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1426-1] New qt-x11-free packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1426-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 08, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1416-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...