Design/Logic Flaw

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated again...

CVE-2008-5659

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated again...

CVE-2008-5659

The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated again...

Debian DSA-1685-1 : uw-imap - buffer overflows, NULL pointer dereference

Two vulnerabilities have been found in uw-imap, an IMAP implementation. The Common Vulnerabilities and Exposures project identifies the following problems : It was discovered that several buffer overflows can be triggered via a long folder extension argument to the tmail or dmail program. This...

Debian DSA-1686-1 : no-ip - buffer overflow

A buffer overflow has been discovered in the HTTP parser of the No-IP.com Dynamic DNS update client, which may result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian DSA-1682-1 : squirrelmail - insufficient input sanitising

Ivan Markovic discovered that SquirrelMail, a webmail application, did not sufficiently sanitise incoming HTML email, allowing an attacker to perform cross site scripting through sending a malicious HTML email. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Debian DSA-1684-1 : lcms - multiple vulnerabilities

Two vulnerabilities have been found in lcms, a library and set of commandline utilities for image color management. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5316 Inadequate enforcement of fixed-length buffer limits allows an attacker to...

Debian Security Advisory DSA 1679-1 (awstats)

The remote host is missing an update to awstats announced via advisory DSA 1679-1. OpenVAS Vulnerability Test $Id: deb16791.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1679-1 awstats Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1683-1 : streamripper - buffer overflow

Multiple buffer overflows involving HTTP header and playlist parsing have been discovered in streamripper CVE-2007-4337, CVE-2008-4829 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-168...

Debian Security Advisory DSA 1674-1 (jailer)

The remote host is missing an update to jailer announced via advisory DSA 1674-1. OpenVAS Vulnerability Test $Id: deb16741.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1674-1 jailer Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1675-1 : phpmyadmin - insufficient input sanitising

Masako Oono discovered that phpMyAdmin, a web-based administration interface for MySQL, insufficiently sanitises input allowing a remote attacker to gather sensitive data through cross site scripting, provided that the user uses the Internet Explorer web browser. This update also fixes a regressi...

Debian Security Advisory DSA 1676-1 (flamethrower (0.1.8-1+etch1))

The remote host is missing an update to flamethrower 0.1.8-1+etch1 announced via advisory DSA 1676-1. OpenVAS Vulnerability Test $Id: deb16761.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1676-1 flamethrower 0.1.8-1+etch1 Authors: Thomas Reinke Copyright...

Debian: Security Advisory (DSA-1674-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1670-1 (enscript)

The remote host is missing an update to enscript announced via advisory DSA 1670-1. OpenVAS Vulnerability Test $Id: deb16701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1670-1 enscript Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1673-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1677-1 : cupsys - integer overflow

An integer overflow has been discovered in the image validation code of cupsys, the Common UNIX Printing System. An attacker could trigger this bug by supplying a malicious graphic that could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian Security Advisory DSA 1672-1 (imlib2)

The remote host is missing an update to imlib2 announced via advisory DSA 1672-1. OpenVAS Vulnerability Test $Id: deb16721.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1672-1 imlib2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1673-1 (wireshark)

The remote host is missing an update to wireshark announced via advisory DSA 1673-1. OpenVAS Vulnerability Test $Id: deb16731.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1673-1 wireshark Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1672-1 : imlib2 - buffer overflow

Julien Danjou and Peter De Wachter discovered that a buffer overflow in the XPM loader of Imlib2, a powerful image loading and rendering library, might lead to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Debian DSA-1673-1 : wireshark - several vulnerabilities

Several remote vulnerabilities have been discovered in network traffic analyzer Wireshark. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3137 The GSM SMS dissector is vulnerable to denial of service. - CVE-2008-3138 The PANA and KISMET dissectors...