[Backports-security-announce] Security Update for libspf2

Gerfried Fuchs uploaded new packages for libspf2 which fixed the following security problem: CVE-2008-2469 Fix buffer overflows in DNS response parsing. For the etch-backports distribution the problem has been fixed in version 1.2.5.dfsg-5+lenny1bpo40+1. For the lenny distribution the problem has...

CVE-2008-4609

The TCP implementation in 1 Linux, 2 platforms based on BSD Unix, 3 Microsoft Windows, 4 Cisco products, and probably other operating systems allows remote attackers to cause a denial of service connection queue exhaustion via multiple vectors that manipulate information in the TCP state table, a...

DSA-1656-1 cupsys - several vulnerabilities

Bulletin has no description...

Debian DSA-1650-1 : openldap2.3 - denial of service

Cameron Hotchkies discovered that the OpenLDAP server slapd, a free implementation of the Lightweight Directory Access Protocol, could be crashed by sending malformed ASN1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1650-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 12, 2008 http://www.debian.org/security/faq -...

DSA-1651-1 ruby1.8 - several vulnerabilities

Bulletin has no description...

DSA-1652-1 ruby1.9 - several vulnerabilities

Bulletin has no description...

Debian: Security Advisory (DSA-1639-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1634-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1642-1 horde3 - cross site scripting

Bulletin has no description...

DSA-1641-1 phpmyadmin - several issues

Bulletin has no description...

DSA-1639-1 twiki - command execution

Bulletin has no description...

Debian Security Advisory DSA 1635-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 1635-1. OpenVAS Vulnerability Test $Id: deb16351.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1635-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

DSA-1635-1 freetype - multiple vulnerabilities

Bulletin has no description...

hotlinks-sqlxss.txt

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Hot Links SQL-PHP 3 report.php Multiple Vulnerabilities Vendor:...

libpng vulnerability

The remote host is probably affected by the vulnerabilities described in CVE-2008-1382 Impact libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG...

Design/Logic Flaw

Certain Red Hat Enterprise Linux RHEL 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification Trojan Horse that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not...

CVE-2008-3844

Certain Red Hat Enterprise Linux RHEL 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification Trojan Horse that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not...

DSA-1632-1 tiff - arbitrary code execution

Bulletin has no description...

Critical: Red Hat Security Advisory: openssh security update

Updated openssh packages are now available for Red Hat Enterprise Linux 4, Red Hat Enterprise Linux 5, and Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHe...