9304 matches found
Debian DSA-1208-1 : bugzilla - several vulnerabilities
Several remote vulnerabilities have been discovered in the Bugzilla bug tracking system, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4534 Javier Fernandez-Sanguino Pena discovered that insecure...
Debian DSA-1210-1 : mozilla-firefox - several vulnerabilities
Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-2788 Fernando Ribeiro discovered that a vulnerability in the getRawDER function...
Debian DSA-1211-1 : pdns - buffer overflow
It was discovered that malformed TCP packets may lead to denial of service and possibly the execution of arbitrary code if the PowerDNS nameserver acts as a recursive nameserver. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Debian DSA-1206-1 : php4 - several vulnerabilities
Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3353 Tim Starling discovered that missing...
DSA-1215-1 xine-lib
Bulletin has no description...
Debian DSA-1207-2 : phpmyadmin - several vulnerabilities
The phpmyadmin update in DSA 1207 introduced a regression. This update corrects this flaw. For completeness, please find below the original advisory text : Several remote vulnerabilities have been discovered in phpMyAdmin, a program to administrate MySQL over the web. The Common Vulnerabilities a...
DSA-1212-1 openssh
Bulletin has no description...
DSA-1207-1 phpmyadmin
Bulletin has no description...
Debian DSA-1205-2 : thttpd - insecure temporary files
The original advisory for this issue didn't contain fixed packages for all supported architectures which are corrected in this update. For reference please find below the original advisory text : Marco d'Itri discovered that thttpd, a small, fast and secure webserver, makes use of insecure...
Debian DSA-1203-1 : libpam-ldap - programming error
Steve Rigler discovered that the PAM module for authentication against LDAP servers processes PasswordPolicyReponse control messages incorrectly, which might lead to an attacker being able to login into a suspended system account. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...
Debian DSA-1204-1 : ingo1 - missing input sanitising
It was discovered that the Ingo email filter rules manager performs insufficient escaping of user-provided data in created procmail rules files, which allows the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian DSA-1202-1 : screen - programming error
'cstone' and Rich Felker discovered that specially crafted UTF-8 sequences may lead an out of bands memory write when displayed inside the screen terminal multiplexer, allowing denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Sun Fire T2000错误DSA签名验证漏洞
Sun Fire是Sun推出的系列中端服务器。 Solaris 10 3/05 HW2的加密提供组件实现上存在漏洞，导致错误地验证DSA签名。 如果运行在Sun Fire T2000平台上的话，则Solaris 10 3/05 HW2中的加密程序可能错误的验证DSA签名。依赖于这个DSA签名验证结果的应用程序就可能信任已被篡改了的数据。 Sun Fire T2000 Server Sun已经为此发布了一个安全公告（Sun-Alert-102543）以及相应补丁: Sun-Alert-102543：Security Vulnerability on Sun Fire T2000 With...
Debian DSA-1201-1 : ethereal - several vulnerabilities
Several remote vulnerabilities have been discovered in the Ethereal network scanner. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4574 It was discovered that the MIME multipart dissector is vulnerable to denial of service caused by an off-by-one...
Debian DSA-1200-1 : qt-x11-free - integer overflow
An integer overflow has been found in the pixmap handling routines in the Qt GUI libraries. This could allow an attacker to cause a denial of service and possibly execute arbitrary code by providing a specially crafted image file and inducing the victim to view it in an application based on Qt...
Debian DSA-1198-1 : python2.3 - buffer overflow
Benjamin C. Wiley Sittler discovered that the repr of the Python interpreter allocates insufficient memory when parsing UCS-4 Unicode strings, which might lead to execution of arbitrary code through a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Debian DSA-1199-1 : webmin - multiple vulnerabilities
Several vulnerabilities have been identified in webmin, a web-based administration toolkit. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-3912 A format string vulnerability in miniserv.pl could allow an attacker to cause a denial of service...
Debian DSA-1196-1 : clamav - several vulnerabilities
Several remote vulnerabilities have been discovered in the ClamAV malware scan engine, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4182 Damian Put discovered a heap overflow error in the script ...
Debian DSA-1190-1 : maxdb-7.5.00 - buffer overflow
Oliver Karow discovered that the WebDBM frontend of the MaxDB database performs insufficient sanitising of requests passed to it, which might lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...