Debian DSA-2057-1 : mysql-dfsg-5.0 - several vulnerabilities

Several vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1626 MySQL allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in...

Debian DSA-2056-1 : zonecheck - missing input sanitizing

It was discovered that in ZoneCheck, a tool to check DNS configurations, the CGI does not perform sufficient sanitation of user input; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian Security Advisory DSA 2053-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 2053-1. OpenVAS Vulnerability Test $Id: deb20531.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2053-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 2045-1 (libtheora)

The remote host is missing an update to libtheora announced via advisory DSA 2045-1. OpenVAS Vulnerability Test $Id: deb20451.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2045-1 libtheora Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 2050-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 2050-1. OpenVAS Vulnerability Test $Id: deb20501.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2050-1 kdegraphics Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2043-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2049-1 (barnowl)

The remote host is missing an update to barnowl announced via advisory DSA 2049-1. OpenVAS Vulnerability Test $Id: deb20491.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2049-1 barnowl Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 2038-2 (pidgin)

The remote host is missing an update to pidgin announced via advisory DSA 2038-2. OpenVAS Vulnerability Test $Id: deb20382.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2038-2 pidgin Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian DSA-2052-1 : krb5 - NULL pointer dereference

Shawn Emery discovered that in MIT Kerberos 5 krb5, a system for authenticating users and services on a network, a NULL pointer dereference flaw in the Generic Security Service Application Program Interface GSS-API library could allow an authenticated remote attacker to crash any server applicati...

Debian DSA-2051-1 : postgresql-8.3 - several vulnerabilities

Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1169 Tim Bunce discovered that the implementation of the procedural language PL/Perl insufficiently...

Debian DSA-2049-1 : barnowl - buffer overflow

It has been discovered that barnowl, a curses-based tty Jabber, IRC, AIM and Zephyr client, is prone to a buffer overflow via its 'CC:' handling, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

Debian DSA-2046-1 : phpgroupware - several vulnerabilities

Several remote vulnerabilities have been discovered in phpgroupware, a Web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0403 A local file inclusion vulnerability allows remote attackers to execute arbitrary...

Debian DSA-2044-1 : mplayer - integer overflow

tixxDZ DZCORE labs discovered a vulnerability in the mplayer movie player. Missing data validation in mplayer's real data transport RDT implementation enable an integer underflow and consequently an unbounded buffer operation. A maliciously crafted stream could thus enable an attacker to execute...

Debian DSA-2045-1 : libtheora - integer overflow

Bob Clary, Dan Kaminsky and David Keeler discovered that in libtheora, a video library part of the Ogg project, several flaws allow context-dependent attackers via a large and specially crafted media file, to cause a denial of service crash of the player using this library, and possibly arbitrary...

Debian DSA-2043-1 : vlc - integer overflow

tixxDZ DZCORE labs discovered a vulnerability in vlc, the multimedia player and streamer. Missing data validation in vlc's real data transport RDT implementation enable an integer underflow and consequently an unbounded buffer operation. A maliciously crafted stream could thus enable an attacker ...

[SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2044-1 [email protected] http://www.debian.org/security/ Devin Carraway May 11, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2044-1 [email protected] http://www.debian.org/security/ Devin Carraway May 11, 2010 http://www.debian.org/security/faq -...

Debian DSA-2042-1 : iscsitarget - format string

Florent Daigniere discovered multiple format string vulnerabilities in Linux SCSI target framework which is known as iscsitarget under Debian allow remote attackers to cause a denial of service in the ietd daemon. The flaw could be trigger by sending a carefully-crafted Internet Storage Name...

Debian Security Advisory DSA 2039-1 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 2039-1. OpenVAS Vulnerability Test $Id: deb20391.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2039-1 cacti Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 2040-1 (squidguard)

The remote host is missing an update to squidguard announced via advisory DSA 2040-1. OpenVAS Vulnerability Test $Id: deb20401.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2040-1 squidguard Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...