Debian: Security Advisory (DSA-1674-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1673-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1672-1 : imlib2 - buffer overflow

Julien Danjou and Peter De Wachter discovered that a buffer overflow in the XPM loader of Imlib2, a powerful image loading and rendering library, might lead to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

[SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1675-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 30, 2008 http://www.debian.org/security/faq -...

DSA-1675-1 phpmyadmin - cross site scripting

Bulletin has no description...

DSA-1673-1 wireshark - several vulnerabilities

Bulletin has no description...

[Backports-security-announce] Security Update for dovecot

Gerfried Fuchs uploaded new packages for dovecot which fixed the following security problems: CVE-2008-4577, Debian Bug 502967 The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

[Backports-security-announce] Security Update for trac

Jan Wagner uploaded a new package for trac which fixed the following security problem: Some vulnerabilities have been reported in Trac, which can be exploited by malicious people to cause a DoS Denial of Service or to conduct phishing attacks. 1 An unspecified error in the HTML sanitiser filter c...

Debian Security Advisory DSA 1662-1 (mysql-dfsg-5.0)

The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1662-1. OpenVAS Vulnerability Test $Id: deb16621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1662-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

[Backports-security-announce] Security Update for ikiwiki

Alexander Wirt uploaded a new package for ikiwiki which fixed the following security problem: Feeding ikiwiki page sources containing certian forms of malformed UTF-8 can cause it to crash. This can potentially be used for a denial of service attack. For the etch-backports distribution the proble...

[SECURITY] [DSA 1666-1] New libxml2 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1666-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 17, 2008 http://www.debian.org/security/faq -...

[Backports-security-announce] Security Update for virtualbox-ose

Michael Meskes uploaded new packages for virtualbox-ose which fixed the following security problem: Debian Bug 504149 Symlink vulnerability due to bad /tmp handling allowing an attacker to overwrite any files owned by the starting user of virtualbox. For the etch-backports distribution the proble...

Debian DSA-1664-1 : ekg - missing input sanitising

It was discovered that ekg, a console Gadu Gadu client performs insufficient input sanitising in the code to parse contact descriptions, which may result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

[SECURITY] [DSA 1664-1] New ekg packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1664-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 10, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1656-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory DSA 1656-1. OpenVAS Vulnerability Test $Id: deb16561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1656-1 cupsys Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problem: CVE-2008-2957, Debian Bug 488632 The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory...

Debian DSA-1660-1 : clamav - NULL pointer dereference, resource exhaustion

Several denial-of-service vulnerabilities have been discovered in the ClamAV anti-virus toolkit : Insufficient checking for out-of-memory conditions results in NULL pointer dereferences CVE-2008-3912 . Incorrect error handling logic leads to memory leaks CVE-2008-3913 and file descriptor leaks...

[Backports-security-announce] Security Update for proftpd-dfsg

Francesco Paolo Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2008-4242, Debian Bug 502674 ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF...

[Backports-security-announce] Security Update for proftpd-dfsg

Francesco Paolo Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2008-4242, Debian Bug 502674 ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF...

[Backports-security-announce] Security Update for libspf2

Gerfried Fuchs uploaded new packages for libspf2 which fixed the following security problem: CVE-2008-2469 Fix buffer overflows in DNS response parsing. For the etch-backports distribution the problem has been fixed in version 1.2.5.dfsg-5+lenny1bpo40+1. For the lenny distribution the problem has...