[SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1412-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

CSTeX: Multiple vulnerabilities

Background CSTeX is a TeX distribution with Czech and Slovak support. It is used for creating and manipulating LaTeX documents. Description Multiple issues were found in the teTeX 2 codebase that CSTeX builds upon GLSA 200709-17, GLSA 200711-26. CSTeX also includes vulnerable code from the GD...

CVE-2007-6095

The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users...

Design/Logic Flaw

The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users...

CVE-2007-6095

The CVE-2007-6095 entry applies to the SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0. When Remote NAT Traversal is used, the system does not correctly perform user registration and message distribution, which may allow remote authenticated users to receive messages inte...

CVE-2007-6095

The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users...

Information disclosure

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information hostnames, usernames, and shell history to a fixed address...

Debian DSA-1404-1 : gallery2 - programming error

Nicklous Roberts discovered that the Reupload module of Gallery 2, a web-based photo management application, allowed unauthorized users to edit Gallery's data file. The oldstable distribution sarge does not contain a gallery2 package. The previous gallery package is not affected by this...

DSA-1403-1 phpmyadmin - cross-site scripting

Bulletin has no description...

DSA-1402-1 gforge - insecure temporary files

Bulletin has no description...

DSA-1399-1 pcre3 - arbitrary code execution

Bulletin has no description...

[SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1388-3 [email protected] http://www.debian.org/security/ Noah Meyerhans October 29, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1388-3 [email protected] http://www.debian.org/security/ Noah Meyerhans October 29, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow

eXtremail 2.1.1 - PLAIN Authentication Remote Stack Overflow / extremail-v6.c Copyright c 2006 by eXtremail include include include include include define BUFSIZE 2048 define BBUFSIZE BUFSIZE/34+1 define NOP 0x41 define AUTHCMD "1 AUTHENTICATE PLAIN\n" define DEFPORT 143 define PORTIMAPD DEFPORT...

Debian DSA-1381-2 : linux-2.6 - several vulnerabilities

Several local vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-5755 The NT bit maybe leaked into the next task which can...

DSA-1382-1 quagga

Bulletin has no description...

DSA-1365-3 id3lib3.8.3 - denial of service

Bulletin has no description...

DSA-1370-2 phpmyadmin - several vulnerabilities

Bulletin has no description...

Debian DSA-1367-1 : krb5 - buffer overflow

It was discovered that a buffer overflow of the RPC library of the MIT Kerberos reference implementation allows the execution of arbitrary code. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...