[SECURITY] [DSA 1717-1] New devil packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1717 [email protected] http://www.debian.org/security/ Steffen Joeris February 05, 2009 http://www.debian.org/security/faq -...

[SECURITY] Fedora 10 Update: nss-3.12.2.0-4.fc10

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Pi3Web 2.0.3 - ISAPI Remote Denial of Service

Pi3Web 2.0.3 - ISAPI Remote Denial of Service Pi3Web ISAPI DoS vulnerability Discovered by: Hamid Ebadi CSIRT Team Member Amirkabir University CSIRT Laboratory APA Laboratory [email protected] Introduction Pi3Web is a free, multithreaded, highly configurable and extensible HTTP server and...

Patchlink Detection

The remote host has a patch management software installed on it. Description : This script uses Windows credentials to detect whether the remote host is running Patchlink and extracts the version number if so. Patchlink is a fully Internet-based, automated, cross-platform, security patch manageme...

Patchlink Detection

The remote host has a patch management software installed on it. Description : This script uses Windows credentials to detect whether the remote host is running Patchlink and extracts the version number if so. Patchlink is a fully Internet-based, automated, cross-platform, security patch manageme...

LnBlog <= 0.9.0 (plugin) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl LnBlog = 0.9.0 Local File Inclusion Vulnerability Script: "LnBlog A cross-platform, file-based...

LnBlog 0.9.0 - plugin Local File Inclusion

LnBlog 0.9.0 - plugin Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl LnBlog = 0.9.0 Local File Inclusion Vulnerability Script: "LnBlog A cross-platform,...

LnBlog 0.9.0 - 'plugin' Local File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl LnBlog = 0.9.0 Local File Inclusion Vulnerability Script: "LnBlog A cross-platform, file-based weblog/mini-CMS." Script site:...

[SECURITY] Fedora 9 Update: filezilla-3.1.0.1-1.fc9

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

[SECURITY] Fedora 8 Update: filezilla-3.1.0.1-1.fc8

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

Mozilla Firefox view-source:javascript url Code Execution Exploit

No description provided by source. html head titleFirelinking 2 - Proof-of-Concept by mikx/title -- This PoC is cross platform : On Windows this example creates the file -- -- c:\booom.bat and launches it opens a dos box with a dir command. On --...

Webmin directory traversal vulnerability

Overview Webmin is a web-based system management tool. Webmin contains a directory traversal vulnerability which allows to bypass authentication. As of June 30, 2006, patched versions of the module addressing this vulnerability for all OS platforms are available from the vendor. This vulnerabilit...

Perl: Execution of arbitrary code

Background Perl is a stable, cross platform programming language. Description Tavis Ormandy and Will Drewry of the Google Security Team have reported a double free vulnerability when processing a crafted regular expression containing UTF-8 characters. Impact A remote attacker could possibly explo...

[SECURITY] Fedora 8 Update: tk-8.4.17-2.fc8

When paired with the Tcl scripting language, Tk provides a fast and powerful way to create cross-platform GUI applications...

[SECURITY] Fedora 7 Update: tk-8.4.13-7.fc7

When paired with the Tcl scripting language, Tk provides a fast and powerful way to create cross-platform GUI applications...

[SECURITY] Fedora 7 Update: SDL_image-1.2.5-7.fc7

Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. This package contains a simple library for loading images of various formats BMP, PPM, PCX, GIF, JPEG, PNG as SDL surfaces...

Adobe Flash Player ActionScript launch command execution

Added: 01/07/2008 CVE: CVE-2008-5499 BID: 32896 OSVDB: 50796 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem An input validation vulnerability allows command execution when the browser loads an SWF file which contains shell...

Adobe Flash Player ActionScript launch command execution

Added: 01/07/2008 CVE: CVE-2008-5499 BID: 32896 OSVDB: 50796 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem An input validation vulnerability allows command execution when the browser loads an SWF file which contains shell...

AMD64 x86 emulation Qt library: Multiple vulnerabilities

Background Qt is a cross-platform GUI framework, which is used e.g. by KDE. The AMD64 x86 emulation Qt library packages Qt libraries for 32bit x86 emulation on AMD64. Description The Qt versions used by the AMD64 x86 emulation Qt libraries were vulnerable to several flaws GLSA 200708-16, GLSA...

[SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1416-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...