GLSA-201503-04 : GNU C Library: Multiple vulnerabilities (GHOST)

The remote host is affected by the vulnerability described in GLSA-201503-04 GNU C Library: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the GNU C Library. Please review the CVE identifiers referenced below for details. Impact : A local attacker may be able to execute...

GNU C Library: Multiple vulnerabilities

Background The GNU C library is the standard C library used by Gentoo Linux systems. Description Multiple vulnerabilities have been discovered in the GNU C Library. Please review the CVE identifiers referenced below for details. Impact A local attacker may be able to execute arbitrary code or cau...

GLSA-201502-14 : grep: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201502-14 grep: Denial of Service A heap buffer overrun has been fixed in the bmexectrans function in kwset.c. Impact : A local user can cause Denial of Service. Workaround : There is no known workaround at this time. %NASLMINLEVE...

GLSA-201412-47 : TORQUE Resource Manager: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-47 TORQUE Resource Manager: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TORQUE Resource Manager. Please review the CVE identifiers referenced below for details. Impact : A context-dependent...

GLSA-201412-44 : policycoreutils: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201412-44 policycoreutils: Privilege escalation The seunshare utility is owned by root with 4755 permissions which can be exploited by a setuid system call. Impact : A local attacker may be able to gain escalated privileges...

GLSA-201412-41 : OpenVPN: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-41 OpenVPN: Denial of Service OpenVPN does not properly handle control channel packets that are too small. Impact : A remote authenticated attacker could send a specially crafted control channel packet, possibly resulting i...

GLSA-201412-35 : RSYSLOG: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-35 RSYSLOG: Denial of Service Multiple vulnerabilities have been discovered in RSYSLOG. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker may be able to create a Denial of...

GLSA-201412-20 : GNUstep Base library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-20 GNUstep Base library: Denial of Service GNUstep Base library does not properly handle the file descriptor for logging, when run as a daemon. Impact : A remote attacker could send a specially crafted request, possibly...

GLSA-201412-23 : Nagios: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-23 Nagios: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Nagios. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to execute arbitrary code,...

GLSA-201412-01 : QEMU: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-01 QEMU: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could cause a Denial of Service...

GLSA-201411-05 : GNU Wget: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201411-05 GNU Wget: Arbitrary code execution An absolute path traversal vulnerability has been found in GNU Wget. Impact : A remote FTP server is able to write to arbitrary files, and consequently execute arbitrary code. Workaroun...

GLSA-201409-09 : Bash: Code Injection (Shellshock)

The remote host is affected by the vulnerability described in GLSA-201409-09 Bash: Code Injection Stephane Chazelas reported that Bash incorrectly handles function definitions, allowing attackers to inject arbitrary code. Impact : A remote attacker could exploit this vulnerability to execute...

GLSA-201409-05 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201409-05 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

GLSA-201408-15 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201408-15 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : A remote authenticated attacker may be able to...

GLSA-201408-13 : Jinja2: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201408-13 Jinja2: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Jinja2. Please review the CVE identifiers referenced below for details. Impact : A local attacker could gain escalated privileges via a...

GLSA-201408-10 : Libgcrypt: Side-channel attack

The remote host is affected by the vulnerability described in GLSA-201408-10 Libgcrypt: Side-channel attack A vulnerability in the implementation of ElGamal decryption procedures of Libgcrypt leaks information to various side-channels. Impact : A physical side-channel attack allows a remote...

GLSA-201408-01 : Zend Framework: SQL injection

The remote host is affected by the vulnerability described in GLSA-201408-01 Zend Framework: SQL injection Developers using non-ASCII-compatible encodings in conjunction with the MySQL PDO driver of PHP may be vulnerable to SQL injection attacks. Impact : A remote attacker could use specially...

GLSA-201407-04 : GnuPG: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201407-04 GnuPG: Denial of Service GnuPG does not properly handle a specially crated compressed packet resulting in an infinite loop. Impact : A context-dependent attacker can cause a Denial of Service. Workaround : There is no...

Mozilla Firefox <= 1.5.0.4 - Javascript Navigator Object Code Execution PoC

No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...

Gentoo-Specific MPG123 - URI Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18794/info The mpg123 application is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may...