Exploit Labs Security Advisory 2005.6

------------------------------------------------------------ - EXPL-A-2005-006 exploitlabs.com Advisory 034 - ------------------------------------------------------------ - XAMPP - OVERVIEW ======== XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really ve...

[SECURITY] [DSA 709-1] New libexif packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 709-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 706-1] New axel packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 706-1 [email protected] http://www.debian.org/security/ Martin Schulze April 13th, 2005 http://www.debian.org/security/faq -...

DSA-699-1 netkit-telnet-ssl - buffer overflow

Bulletin has no description...

security flaw

Buffer overflow in the slcaddreply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character SLC commands...

[SECURITY] [DSA 696-1] New perl packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 696-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2005 http://www.debian.org/security/faq -...

DSA-696-1 perl - design flaw

Bulletin has no description...

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 662-2] New squirrelmail package fixes regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 662-2 [email protected] http://www.debian.org/security/ Martin Schulze March 14th, 2005 http://www.debian.org/security/faq -...

DSA-690-1 bsmtpd - missing input sanitising

Bulletin has no description...

[SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 687-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 686-1] New gftp packages fix directory traversal vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 686-1 [email protected] http://www.debian.org/security/ Martin Schulze February 17th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 683-1] New postgresql packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 683-1 [email protected] http://www.debian.org/security/ Martin Schulze February 15th, 2005 http://www.debian.org/security/faq -...

security flaw

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PD...

[SECURITY] [DSA 669-1] New php3 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 669-1 [email protected] http://www.debian.org/security/ Martin Schulze February 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading

-------------------------------------------------------------------------- Debian Security Advisory DSA 667-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

DSA-665-1 ncpfs - missing privilege release

Bulletin has no description...

DSA-663-1 prozilla - buffer overflows

Bulletin has no description...

DSA-659-1 libpam-radius-auth - information leak, integer underflow

Bulletin has no description...

DSA-643-1 queue - buffer overflows

Bulletin has no description...