Debian DSA-1948-1 : ntp - denial of service

Robin Park and Dmitri Vinokurov discovered that the daemon component of the ntp package, a reference implementation of the NTP protocol, is not properly reacting to certain incoming packets. An unexpected NTP mode 7 packet MODEPRIVATE with spoofed IP data can lead ntpd to reply with a mode 7...

Debian DSA-1909-1 : postgresql-ocaml - missing escape function

It was discovered that postgresql-ocaml, OCaml bindings to PostgreSQL's libpq, was missing a function to call PQescapeStringConn. This is needed, because PQescapeStringConn honours the charset of the connection and prevents insufficient escaping, when certain multibyte character encodings are use...

Debian DSA-1931-1 : nspr - several vulnerabilities

Several vulnerabilities have been discovered in the NetScape Portable Runtime Library, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1563 A programming error in the string handling code may lead t...

ldap-rootdse NSE Script

Retrieves the LDAP root DSA-specific Entry DSE Example Usage nmap -p 389 --script ldap-rootdse Script Output PORT STATE SERVICE 389/tcp open ldap | ldap-rootdse: | currentTime: 20100112092616.0Z | subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=cqure,DC=net | dsServiceName: CN=NTDS...

Debian Security Advisory DSA 1993-1 (otrs2)

The remote host is missing an update to otrs2 announced via advisory DSA 1993-1. OpenVAS Vulnerability Test $Id: deb19931.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1993-1 otrs2 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1987-1 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1987-1. OpenVAS Vulnerability Test $Id: deb19871.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1987-1 lighttpd Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1992-1 (chrony)

The remote host is missing an update to chrony announced via advisory DSA 1992-1. OpenVAS Vulnerability Test $Id: deb19921.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1992-1 chrony Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1991-1 (squid/squid3)

The remote host is missing an update to squid/squid3 announced via advisory DSA 1991-1. OpenVAS Vulnerability Test $Id: deb19911.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1991-1 squid/squid3 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft In...

Debian Security Advisory DSA 1841-2 (git-core)

The remote host is missing an update to git-core announced via advisory DSA 1841-2. OpenVAS Vulnerability Test $Id: deb18412.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1841-2 git-core Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-1986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1987-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

maildrop 2.3.0本地权限提升漏洞

CVE ID: CVE-2010-0301 maildrop是带有过滤功能的邮件传输代理。 如果root用户以-d选项运行maildrop，则main.C使用了root的gid执行用户主目录中的.mailfilter，这允许本地用户通过特制文件获得权限提升。成功攻击要求maildrop编译为没有设置RESETGID，如邮件目录没有使用粘着位。 Double Precision Inc. maildrop 2.3.0 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1981-1）以及相应补丁: DSA-1981-1：New maildrop...

Hybserv2 :help命令远程拒绝服务漏洞

BUGTRAQ ID: 38006 CVE ID: CVE-2010-0303 Hybserv2是改进版的Hybserv IRC服务器，可提供即时会话服务。 Hybserv2的mystring.c文件中存在拒绝服务漏洞，远程用户可以通过向MemoServ服务发送包含有help \t选项的私人消息导致守护程序崩溃。 Hybserv2 Hybserv2 1.9.4 Hybserv2 Hybserv2 1.9.3 Hybserv2 Hybserv2 1.9.2 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1982-1）以及相应补丁:...

[SECURITY] [DSA-1990-2] New trac-git package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1990-2 [email protected] http://www.debian.org/security/ Stefan Fritsch February 04, 2010 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1974-1 (gzip)

The remote host is missing an update to gzip announced via advisory DSA 1974-1. OpenVAS Vulnerability Test $Id: deb19741.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1974-1 gzip Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1981-2 (maildrop)

The remote host is missing an update to maildrop announced via advisory DSA 1981-2. OpenVAS Vulnerability Test $Id: deb19812.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1981-2 maildrop Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-1974-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1981-1 (maildrop)

The remote host is missing an update to maildrop announced via advisory DSA 1981-1. OpenVAS Vulnerability Test $Id: deb19811.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1981-1 maildrop Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1978-1 (phpgroupware)

The remote host is missing an update to phpgroupware announced via advisory DSA 1978-1. OpenVAS Vulnerability Test $Id: deb19781.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1978-1 phpgroupware Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft In...

Debian: Security Advisory (DSA-1973-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...