USN-373-1: mutt vulnerabilities

Race conditions were discovered in mutt's handling of temporary files. Under certain conditions when using a shared temp directory the default, other local users could overwrite arbitrary files owned by the user running mutt. This vulnerability is more likely when the temp directory is over NFS...

XSession race conditions

Race conditions allows different user to see error messages...

FreeBSD 6.0/6.1 - Ftrucante Local Denial of Service

// source: https://www.securityfocus.com/bid/20522/info FreeBSD is prone to a local denial-of-service vulnerability because it fails to handle exceptional conditions. An attacker may leverage this issue to crash the affected computer, denying service to legitimate users. Under certain conditions,...

CVE-2006-4813

The blockpreparewrite function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked...

Multiple Wireshark (Ethereal) sniffer security vulnerabilities

Multiple DoS conditions IPSec ESP dissector off-by-one overflow...

Multiple Linux kernel DoS condiotions

DoS with SG driver, HID031 bit clearing problem on PPC970 processors...

Multiple Globus Toolkit grid toolkit vulnerabilities

Race conditions. Symbolic links problem...

DConnect Daemon chat server multiple security vulnerabilities

DoS conditions, format string vulnerabilities...

Linux kernel procfs race conditions

Privilege escalation is possible...

security flaw

The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the password in the Value attribute of a password entry field, which allows attackers to steal the password by performing a "view source" or other operation to obtain the w...

Microsoft Office 20002002 - Property Code Execution

Microsoft Office 20002002 - Property Code Execution source: https://www.securityfocus.com/bid/18911/info Microsoft Office is prone to a code-execution vulnerability. This is due to a failure to handle exceptional conditions. Successfully exploiting this issue allows attackers to corrupt process...

Microsoft Excel OBJECT Record Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability because it fails to handle exceptional conditions. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users. Note that Microsoft Office...

Microsoft Office 2000/2002 - Property Code Execution

source: https://www.securityfocus.com/bid/18911/info Microsoft Office is prone to a code-execution vulnerability. This is due to a failure to handle exceptional conditions. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context o...

Server crash on ICMP packets with Loose Source and Record Route IP options.

Short message translation: There are DoS conditions in Windows 2000 built-in NAT server. Tested configuration: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 with NAT server enabled. While routing packets with options "Loose Source and Record Route"...

Microsoft Internet Explorer 5.0.1 - Frameset Memory Corruption

Microsoft Internet Explorer 5.0.1 - Frameset Memory Corruption source: https://www.securityfocus.com/bid/18277/info Microsoft Internet Explorer is affected by a memory-corruption vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner. An...

Sun Java Runtime Environment 1.31.41.5 - Nested Array Objects Denial of Service

Sun Java Runtime Environment 1.31.41.5 - Nested Array Objects Denial of Service source: https://www.securityfocus.com/bid/18058/info The Sun Java Runtime Environment is vulnerable to a denial-of-service vulnerability. This issue is due to the software's failure to handle exceptional conditions...

Sun Java Runtime Environment 1.3/1.4/1.5 - Nested Array Objects Denial of Service

source: https://www.securityfocus.com/bid/18058/info The Sun Java Runtime Environment is vulnerable to a denial-of-service vulnerability. This issue is due to the software's failure to handle exceptional conditions. This issue is reported to affect Java Runtime Environment versions up to 1.4.211...

Multiple Raydium game engine security vulnerabilities

Buffer overflows, format string vulnerabilities, DoS conditions in both server and client parts...

FreeBSD : phpwebftp -- 'language' Local File Inclusion (d9dc2697-dadf-11da-912f-00123ffe8333)

Secunia reports : phpWebFTP have a vulnerability, which can be exploited by malicious people to disclose sensitive information. Input passed to the 'language' parameter in index.php isn't properly verified, before it is used to include files. This can be exploited to include arbitrary files from...

Multiple Linux kernel security vulnerabilities

sysmbind buffer overflow, SELinux module DoS, /sys filesystem DoS, amd64 debugging race conditions DoS, getsockopt kernel memory content leak, iprouteinput DoS...