DSA-917-1 courier - programming error

Bulletin has no description...

[SECURITY] [DSA 896-1] New ftpd-ssl packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 896-1 [email protected] http://www.debian.org/security/ Martin Schulze November 15th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 809-3] New squid packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 809-3 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 885-1] New OpenVPN packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 885-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...

Mambo Open Source, Path disclosure

KAPDA::11 - Mambo Open Source, Path disclosure KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.5.2.3 , 4.5.2.2 , 4.5.2.1 ,4.5.2 Bug: path disclosure Exploitation: Remote with browser Discussion: -------------------- Mambo is a feature-rich dynamic portal engine/conten...

[SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 878-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

DSA-548-2 imlib - unsanitised input

Bulletin has no description...

[SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 868-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 867-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2005 http://www.debian.org/security/faq -...

DSA-861-1 up-imap - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 858-1] New xloadimage packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 858-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...

DSA-857-1 graphviz - insecure temporary file

Bulletin has no description...

DSA-847-1 dia - missing input sanitising

Bulletin has no description...

Debian DSA-816-1 : xfree86 - integer overflow

Soren Sandmann discovered a bug in memory allocation for pixmap images, that can cause a crash of the X server or to execute arbitrary code. The update for the old stable distribution woody also contains a different correction for multiple vulnerabilities in libXpm DSA 607, CAN-2004-0914,...

Debian DSA-824-1 : clamav - infinite loop, buffer overflow

Two vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified : - CAN-2005-2919 A potentially infinite loop could lead to a denial of service. -...

DSA-821-1 python2.3 - integer overflow

Bulletin has no description...

DSA-816-1 xfree86 - integer overflow

Bulletin has no description...

DSA-813-1 centericq - several

Bulletin has no description...

[SECURITY] [DSA 811-1] New common-lisp-controller packages fix arbitrary code injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 811-1 [email protected] http://www.debian.org/security/ Martin Schulze September 14th, 2005 http://www.debian.org/security/faq -...

Debian DSA-796-1 : affix - remote command execution

Kevin Finisterre reports that affix, a package used to manage bluetooth sessions under Linux, uses the popen call in an unsafe fashion. A remote attacker can exploit this vulnerability to execute arbitrary commands on a vulnerable system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...