2442 matches found
[SECURITY] [DSA 689-1] New mod_python packages fix information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 689-1 [email protected] http://www.debian.org/security/ Martin Schulze February 23rd, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 687-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 686-1] New gftp packages fix directory traversal vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 686-1 [email protected] http://www.debian.org/security/ Martin Schulze February 17th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 682-1] New awstats packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 682-1 [email protected] http://www.debian.org/security/ Martin Schulze February 15th, 2005 http://www.debian.org/security/faq -...
CVE-2005-0114
vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allow...
[SECURITY] [DSA 655-1] New zhcon packages fix unauthorised file access
-------------------------------------------------------------------------- Debian Security Advisory DSA 655-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 655-1] New zhcon packages fix unauthorised file access
-------------------------------------------------------------------------- Debian Security Advisory DSA 655-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 653-1] New ethereal packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 653-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...
CVE-2004-1734
PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the 1 tcorepath parameter to bugapi.php or 2 tcoredir parameter to relationshipapi.php to reference a URL on a remote web server that contains the code...
SUSE-SA:2004:040: samba
The remote host is missing the patch for the advisory SUSE-SA:2004:040 samba. There is a problem in the Samba file sharing service daemon, which allows a remote user to have the service consume lots of computing power and potentially crash the service by querying special wildcarded filenames. Thi...
[SECURITY] [DSA 580-1] New iptables packages fix modprobe failure
-------------------------------------------------------------------------- Debian Security Advisory DSA 580-1 [email protected] http://www.debian.org/security/ Martin Schulze November 1st, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 556-2] New netkit-telnet packages really fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 556-2 [email protected] http://www.debian.org/security/ Martin Schulze XXXXX 8th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 556-1] New netkit-telnet packages fix invalid free
-------------------------------------------------------------------------- Debian Security Advisory DSA 556-1 [email protected] http://www.debian.org/security/ Matt Zimmerman October 2nd, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory
-------------------------------------------------------------------------- Debian Security Advisory DSA 544-1 [email protected] http://www.debian.org/security/ Martin Schulze September 14th, 2004 http://www.debian.org/security/faq -...
CVE-2002-1160
The default configuration of the pamxauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by stealing the cookies from a temporary .xauth file, which is created with the original user's credentials after root uses su...
[SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 540-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2004 http://www.debian.org/security/faq -...
Mandrake Linux Security Advisory : vim (MDKSA-2003:012)
A vulnerability was discovered in vim by Georgi Guninski that allows arbitrary command execution using the libcall feature found in modelines. A patch to fix this problem was introduced in vim 6.1 patchlevel 265. This patch has been applied to the provided update packages. %NASLMINLEVEL 70300 C...
[SECURITY] [DSA 506-1] New neon packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 506-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2004 http://www.debian.org/security/faq -...
[Full-Disclosure] [SECURITY] [DSA 485-1] New ssmtp packages fix format string vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 485-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 14th, 2004 http://www.debian.org/security/faq -...