CVE-2011-3599

The Crypt::DSA aka Crypt-DSA module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack...

CVE-2011-3599

The CVE-2011-3599 issue affects the Perl Crypt::DSA (Crypt-DSA) module before version 1.18, where, in the absence of /dev/random, it falls back to Data::Random. This fallback could enable remote attackers to spoof signatures or recover signing keys via brute-force. Connected advisories confirm th...

Debian DSA-2319-1 : policykit-1 - race condition

Neel Mehta discovered that a race condition in Policykit, a framework for managing administrative policies and privileges, allowed local users to elevate privileges by executing a setuid program from pkexec. The oldstable distribution lenny does not contain the policykit-1 package. %NASLMINLEVEL...

Debian DSA-2320-1 : dokuwiki - regression fix

The DokuWiki update included in Debian Lenny 5.0.9 to address a cross site scripting issue CVE-2011-2510 had a regression rendering links to external websites broken. This update corrects that regression. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Debian DSA-2316-1 : quagga - several vulnerabilities

Riku Hietamaki, Tuomo Untinen and Jukka Taimisto discovered several vulnerabilities in Quagga, an Internet routing daemon : - CVE-2011-3323 A stack-based buffer overflow while decoding Link State Update packets with a malformed Inter Area Prefix LSA can cause the ospf6d process to crash or...

Debian DSA-2317-1 : icedove - several vulnerabilities

CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog -- which has 'open' as the default action --, while a user presses the ENTER key. - CVE-2011-2995 Benjamin Smedberg, Bob Clary and Jesse Ruderman discovered crashes in the rendering engine, which could lead to the...

Debian DSA-2315-1 : openoffice.org - multiple vulnerabilities

Red Hat, Inc. security researcher Huzaifa Sidhpurwala reported multiple vulnerabilities in the binary Microsoft Word doc file format importer of OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for Microsoft Office. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-2314-1 : puppet - multiple vulnerabilities

Multiple security issues have been discovered in Puppet, a centralized configuration management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-3848 Kristian Erik Hermansen reported that an unauthenticated directory traversal could drop any...

Debian DSA-2313-1 : iceweasel - several vulnerabilities

Several vulnerabilities have been found in Iceweasel, a web browser based on Firefox : - CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog -- which has 'open' as the default action --, while a user presses the ENTER key. - CVE-2011-2995 Benjamin Smedberg, Bob Cla...

Debian DSA-2311-1 : openjdk-6 - several vulnerabilities

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Java SE platform. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-0862 Integer overflow errors in the JPEG and font parser allow untrusted code including applets to...

Debian Security Advisory DSA 2295-1 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 2295-1. OpenVAS Vulnerability Test $Id: deb22951.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2295-1 iceape Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian Security Advisory DSA 2304-1 (squid3)

The remote host is missing an update to squid3 announced via advisory DSA 2304-1. OpenVAS Vulnerability Test $Id: deb23041.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2304-1 squid3 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian Security Advisory DSA 2307-1 (chromium-browser)

The remote host is missing an update to chromium-browser announced via advisory DSA 2307-1. OpenVAS Vulnerability Test $Id: deb23071.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2307-1 chromium-browser Authors: Thomas Reinke Copyright: Copyright c 2011...

Debian Security Advisory DSA 2300-2 (nss)

The remote host is missing an update to nss announced via advisory DSA 2300-2. OpenVAS Vulnerability Test $Id: deb23002.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2300-2 nss Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian Security Advisory DSA 2298-1 (apache2)

The remote host is missing an update to apache2 announced via advisory DSA 2298-1. OpenVAS Vulnerability Test $Id: deb22981.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2298-1 apache2 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian Security Advisory DSA 2298-2 (apache2)

The remote host is missing an update to apache2 announced via advisory DSA 2298-2. OpenVAS Vulnerability Test $Id: deb22982.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2298-2 apache2 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2297-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2296-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2306-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2308-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...