[ GLSA 200602-09 ] BomberClone: Remote execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200602-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Mozilla Firefox 1.5 (Linux) - 'location.QueryInterface()' Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Mozilla Firefox 1.5 location.QueryInterface() Code Execution (linux)

Exploit for linux platform in category remote exploits ==================================================================== Mozilla Firefox 1.5 location.QueryInterface Code Execution linux ==================================================================== This file is part of the Metasploit...

Mozilla Firefox 1.5 (Linux) - location.QueryInterface() Code Execution (Metasploit)

Mozilla Firefox 1.5 Linux - location.QueryInterface Code Execution Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license a...

GLSA-200601-16 : MyDNS: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200601-16 MyDNS: Denial of Service MyDNS contains an unspecified flaw that may allow a remote Denial of Service. Impact : An attacker could cause a Denial of Service by sending malformed DNS queries to the MyDNS server. Workaround...

GLSA-200601-11 : KDE kjs: URI heap overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-11 KDE kjs: URI heap overflow vulnerability Maksim Orlovich discovered an incorrect bounds check in kjs when handling URIs. Impact : By enticing a user to load a specially crafted webpage containing malicious JavaScript, an...

Clam AntiVirus vulnerable to memory corruption via specially crafted UPX packed file

Overview A vulnerability in the ClamAV antivirus toolkit may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Clam AntiVirus is an antivirus toolkit for Unix-like systems that is commonly integrated with mail servers for email attachment scanning. It supports ...

[ GLSA 200601-03 ] HylaFAX: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200601-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2006-0071

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

Code injection

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

CVE-2006-0071

Pinentry on Gentoo is affected by CVE-2006-0071: the pinentry ebuild before 0.7.2-r2 sets the sgid bit on pinentry binaries, allowing local users to read or overwrite files with gid 0. Affected packages include pinentry, pinentry-curses, pinentry-gtk, and pinentry-gtk. Remediation: upgrade to pin...

CVE-2006-0071

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

CVE-2006-0071

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

[ GLSA 200601-01 ] pinentry: Local privilege escalation

Gentoo Linux Security Advisory GLSA 200601-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 200512-18 ] XnView: Privilege escalation

Gentoo Linux Security Advisory GLSA 200512-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-4595

CVE-2005-4595 describes an untrusted search path (RPATH/DT_RPATH) vulnerability in XnView 1.70 and NView 4.51 on Gentoo Linux. The dynamic loader could search in untrusted directories for shared libraries, enabling a local attacker to execute arbitrary code with the privileges of the user running...

CVE-2005-4595

Untrusted search path vulnerability RPATH in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory...

CVE-2005-4595

Untrusted search path vulnerability RPATH in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current working directory...

GLSA-200512-15 : rssh: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200512-15 rssh: Privilege escalation Max Vozeler discovered that the rsshchroothelper command allows local users to chroot into arbitrary directories. Impact : A local attacker could exploit this vulnerability to gain root...

[Full-disclosure] [ GLSA 200512-15 ] rssh: Privilege escalation

Gentoo Linux Security Advisory GLSA 200512-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...