Debian DSA-2367-1 : asterisk - several vulnerabilities

Several vulnerabilities have been discovered in Asterisk, an Open Source PBX and telephony toolkit : - CVE-2011-4597 Ben Williams discovered that it was possible to enumerate SIP user names in some configurations. Please see the upstream advisory for details. This update only modifies the sample...

Debian DSA-2372-1 : heimdal - buffer overflow

It was discovered that the Kerberos support for telnetd contains a pre-authentication buffer overflow, which may enable remote attackers who can connect to TELNET to execute arbitrary code with root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Debian DSA-2379-1 : krb5 - several vulnerabilities

It was discovered that the Key Distribution Center KDC in Kerberos 5 crashes when processing certain crafted requests : - CVE-2011-1528 When the LDAP backend is used, remote users can trigger a KDC daemon crash and denial of service. - CVE-2011-1529 When the LDAP or Berkeley DB backend is used,...

Debian DSA-2378-1 : ffmpeg - several vulnerabilities

Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. Multiple input validations in the decoders for QDM2, VP5, VP6, VMD and SVQ1 files could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

Debian DSA-2381-1 : squid3 - invalid memory deallocation

It was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash. The squid package and the version of Squid 3 shipped in lenny lack IPv6 support and are not affected by this issue. %NASLMINLEV...

Debian DSA-2380-1 : foomatic-filters - shell command injection

It was discovered that the foomatic-filters, a support package for setting up printers, allowed authenticated users to submit crafted print jobs which would execute shell commands on the print servers. CVE-2011-2697 was assigned to the vulnerability in the Perl implementation included in lenny, a...

Debian DSA-2370-1 : unbound - several vulnerabilities

It was discovered that Unbound, a recursive DNS resolver, would crash when processing certain malformed DNS responses from authoritative DNS servers, leading to denial of service. - CVE-2011-4528 Unbound attempts to free unallocated memory during processing of duplicate CNAME records in a signed...

Debian DSA-2384-2 : cacti - several vulnerabilities

Several vulnerabilities have been discovered in Cacti, a graphing tool for monitoring data. Multiple cross site scripting issues allow remote attackers to inject arbitrary web script or HTML. A SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands. %NASLMINLEVEL...

CVE-2011-4130

Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer...

Debian DSA-2357-1 : evince - several vulnerabilities

Jon Larimer from IBM X-Force Advanced Research discovered multiple vulnerabilities in the DVI backend of the Evince document viewer : - CVE-2010-2640 Insufficient array bounds checks in the PK fonts parser could lead to function pointer overwrite, causing arbitrary code execution. - CVE-2010-2641...

Debian DSA-2355-1 : clearsilver - format string vulnerability

Leo Iannacone and Colin Watson discovered a format string vulnerability in the Python bindings for the Clearsilver HTML template system, which may lead to denial of service or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Debian DSA-2354-1 : cups - several vulnerabilities

Petr Sklenar and Tomas Hoger discovered that missing input sanitising in the GIF decoder inside the CUPS printing system could lead to denial of service or potentially arbitrary code execution through crafted GIF files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-2352-1 : puppet - programming error

It was discovered that Puppet, a centralized configuration management solution, misgenerated certificates if the 'certdnsnames' option was used. This could lead to man in the middle attacks. More details are available on the Puppet website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-2350-1 : freetype - missing input sanitising

It was discovered that missing input sanitising in Freetype's processing of CID-keyed fonts could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Debian DSA-2348-1 : systemtap - several vulnerabilities

Several vulnerabilities were discovered in SystemTap, an instrumentation system for Linux : - CVE-2011-2503 It was discovered that a race condition in staprun could lead to privilege escalation. - CVE-2010-4170 It was discovered that insufficient validation of environment variables in staprun cou...

Debian DSA-2351-1 : wireshark - buffer overflow

Huzaifa Sidhpurwala discovered a buffer overflow in Wireshark's ERF dissector, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2351. Th...

Debian DSA-2347-1 : bind9 - improper assert

It was discovered that BIND, a DNS server, crashes while processing certain sequences of recursive DNS queries, leading to a denial of service. Authoritative-only server configurations are not affected by this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA 2346-2] proftpd-dfsg regression fix

------------------------------------------------------------------------- Debian Security Advisory DSA-2346-2 [email protected] http://www.debian.org/security/ Florian Weimer November 16, 2011 http://www.debian.org/security/faq -...

Debian DSA-2346-2 : proftpd-dfsg - several vulnerabilities

Several vulnerabilities were discovered in ProFTPD, an FTP server : - No CVE id ProFTPD incorrectly uses data from an unencrypted input buffer after encryption has been enabled with STARTTLS, an issue similar to CVE-2011-0411. - CVE-2011-4130 ProFTPD uses a response pool after freeing it under...

Debian DSA-2343-1 : openssl - CA trust revocation

Several weak certificates were issued by Malaysian intermediate CA'Digicert Sdn. Bhd.' This event, along with other issues, has lead to Entrust Inc. and Verizon Cybertrust to revoke the CA's cross-signed certificates. This update to OpenSSL, a Secure Sockets Layer toolkit, reflects this decision ...