Debian DSA-1873-1 : xulrunner - programming error

Juan Pablo Lopez Yacubian discovered that incorrect handling of invalid URLs could be used for spoofing the location bar and the SSL certificate status of a web page. Xulrunner is no longer supported for the old stable distribution etch. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-1899-1 : strongswan - several vulnerabilities

Several remote vulnerabilities have been discovered in strongswan, an implementation of the IPSEC and IKE protocols. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1957 CVE-2009-1958 The charon daemon can crash when processing certain crafted IKEv2...

Debian DSA-1935-1 : gnutls13 gnutls26 - several vulnerabilities

Dan Kaminsky and Moxie Marlinspike discovered that gnutls, an implementation of the TLS/SSL protocol, does not properly handle a '\0' character in a domain name in the subject's Common Name or Subject Alternative Name SAN field of an X.509 certificate, which allows man-in-the-middle attackers to...

Debian DSA-1907-1 : kvm - several vulnerabilities

Several vulnerabilities have been discovered in kvm, a full virtualization system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5714 Chris Webb discovered an off-by-one bug limiting KVM's VNC passwords to 7 characters. This flaw might make it...

Debian DSA-1925-1 : proftpd-dfsg - insufficient input validation

It has been discovered that proftpd-dfsg, a virtual-hosting FTP daemon, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, when the dNSNameRequired TLS option is enabled. %NASLMINLEVEL 70300 C Tenable Network Security,...

Debian DSA-1869-1 : curl - insufficient input validation

It was discovered that curl, a client and library to get files from servers using HTTP, HTTPS or FTP, is vulnerable to the 'Null Prefix Attacks Against SSL/TLS Certificates' recently published at the Blackhat conference. This allows an attacker to perform undetected man-in-the-middle attacks via ...

Debian DSA-1902-1 : elinks - buffer overflow

Jakub Wilk discovered an off-by-one buffer overflow in the charset handling of elinks, a feature-rich text-mode WWW browser, which might lead to the execution of arbitrary code if the user is tricked into opening a malformed HTML page. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-1972-1 : audiofile - buffer overflow

Max Kellermann discovered a heap-based buffer overflow in the handling of ADPCM WAV files in libaudiofile. This flaw could result in a denial of service application crash or possibly execution of arbitrary code via a crafted WAV file. The old stable distribution etch, this problem will be fixed i...

Debian DSA-1828-1 : ocsinventory-agent - insecure module search path

It was discovered that the ocsinventory-agent which is part of the ocsinventory suite, a hardware and software configuration indexing service, is prone to an insecure perl module search path. As the agent is started via cron and the current directory / in this case is included in the default perl...

DSA-2003-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

[Backports-security-announce] etch-backports discontinued

Hi users, Hi contributors, as some of you may heard 1 the security support for etch terminated on February 15th. That means that our support for etch backports also ends here. Please dont upload to etch-backports anymore. The downloads are still possible, but please remember that there is no...

[Backports-security-announce] etch-backports discontinued

Hi users, Hi contributors, as some of you may heard 1 the security support for etch terminated on February 15th. That means that our support for etch backports also ends here. Please dont upload to etch-backports anymore. The downloads are still possible, but please remember that there is no...

Debian: Security Advisory (DSA-1986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1981-1] New maildrop packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1981-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 28, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1981-2] New maildrop packages fix regression

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1981-2 [email protected] http://www.debian.org/security/ Steffen Joeris January 28, 2010 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1968-2 (pdns-recursor)

The remote host is missing an update to pdns-recursor announced via advisory DSA 1968-2. OpenVAS Vulnerability Test $Id: deb19682.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1968-2 pdns-recursor Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...

[SECURITY] [DSA 1985-1] New sendmail packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1985-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 31, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1979-1] New lintian packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1979-1 [email protected] http://www.debian.org/security/ Raphael Geissert January 27, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1979-1] New lintian packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1979-1 [email protected] http://www.debian.org/security/ Raphael Geissert January 27, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1976-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 22, 2010 http://www.debian.org/security/faq -...