8254 matches found
libgd integer overflow
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Subject: GD Graphics Library integer overflow leading to heap overflow. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Product Description: An ANSI C library for the dynamic creation o...
Mandrake Linux Security Advisory : gaim (MDKSA-2002:054-1)
Versions of Gaim an AOL instant message client prior to 0.58 contain a buffer overflow in the Jabber plug-in module. As well, a vulnerability was discovered in the URL-handling code, where the 'manual' browser command passes an untrusted string to the shell without reliable quoting or escaping...
Mandrake Linux Security Advisory : python (MDKSA-2002:082-1)
A vulnerability was discovered in python by Zack Weinberg in the way that the execvpe method from the os.py module uses a temporary file name. The file is created in an unsafe manner and execvpe tries to execute it, which can be used by a local attacker to execute arbitrary code with the privileg...
alternate samba package for Slackware 10.0
It was pointed out that the new Samba packages for Slackware 10.0 and -current have a dependency on libattr.so that wasn't in the previous packages. Since it's not the intent to introduce new requirements in security patches especially for stable versions, an alternate version of the samba packag...
Note for "Invalid ContentType may disclose cache directory"
Note for "Invalid ContentType may disclose cache directory" This vulnerability"Invalid ContentType may disclose cache directory" doesn't work on all systems. "Invalid ContentType may disclose cache directory", at http://www.safecenter.net/UMBRELLAWEBV4/threadid10008/ Please note that execdror6 an...
[SECURITY] [DSA 232-2] New CUPS packages fix wrong libPNG dependency
-------------------------------------------------------------------------- Debian Security Advisory DSA 232-2 [email protected] http://www.debian.org/security/ Martin Schulze February 20th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 232-2] New CUPS packages fix wrong libPNG dependency
-------------------------------------------------------------------------- Debian Security Advisory DSA 232-2 [email protected] http://www.debian.org/security/ Martin Schulze February 20th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem
-------------------------------------------------------------------------- Debian Security Advisory DSA 147-2 [email protected] http://www.debian.org/security/ Martin Schulze August 26th, 2002 http://www.debian.org/security/faq -...
Security Bulletin MS01-030
Title: Incorrect Attachment Handling in Exchange 2000 OWA Can Execute Script Date: 06 June 2001 Software: Microsoft Exchange 2000 Server Outlook Web Access Impact: Run code of attacker's choice Bulletin: MS01-030 Microsoft encourages customers to review the Security Bulletin at:...
Caucho Technology Resin 1.2 - JSP Source Disclosure
source: https://www.securityfocus.com/bid/1986/info Resin is a servlet and JSP engine that supports java and javascript. ServletExec will return the source code of JSP files when an HTTP request is appended with certain characters. This vulnerability is dependent on the platform that Resin is...
ROS-2-1659
2.1659 Denial of Service in Libxml2 CVE-2021-3541 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to insufficient validation of user input. A remote attacker can pass specially crafted input data to a...
SS-2018-015: Vulnerable dependency
More info at https://www.silverstripe.org/download/security-releases/ss-2018-015/...
