1354 matches found
GLSA-200909-09 : Screenie: Insecure temporary file usage
The remote host is affected by the vulnerability described in GLSA-200909-09 Screenie: Insecure temporary file usage Dmitry E. Oboukhov reported that Screenie does not handle '/tmp/.screenie.' temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary...
ISC DHCP dhclient stack buffer overflow
Overview The ISC DHCP dhclient application contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code with root privileges. Description As described in RFC 2131, "The Dynamic Host Configuration Protocol DHCP provides a framework for passing...
[ GLSA 200907-02 ] ModSecurity: Denial of Service
Gentoo Linux Security Advisory GLSA 200907-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
[ GLSA 200905-09 ] libsndfile: User-assisted execution of arbitrary code
Gentoo Linux Security Advisory GLSA 200905-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
[ GLSA 200905-06 ] acpid: Denial of Service
Gentoo Linux Security Advisory GLSA 200905-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
OpenSSL DTLS报文多个拒绝服务漏洞
Bugraq ID: 35001 CVE ID：CVE-2009-1378 CVE-2009-1377 CNCVE ID：CNCVE-20091378 CNCVE-20091377 OpenSSL是一款开放源码的SSL实现，用来实现网络通信的高强度加密。 OpenSSL存在多个漏洞，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 -OpenSSL库没有正确限制缓冲DTLS记录的数值，提交特殊构建的DTLS报文可导致消耗所有内存。 -处理DTLS消息时存在错误，通过发送大量乱序的握手消息可消耗大量内容。 OpenSSL Project OpenSSL 0.9.8 k OpenSSL...
NSD vulnerable to one-byte overflow
Overview A vulnerability exists in the way NSD processes certain types of packets that may lead to a one-byte buffer overflow. Description Name server daemon NSD is an open source name server developed by NLnet Labs. NSD contains an off-by-one error that can cause a one-byte buffer overflow when...
CVE-2008-6756
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...
Default credentials
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...
DEBIAN-CVE-2008-6756
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...
CVE-2008-6756
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...
CVE-2008-6756
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...
CVE-2008-6756
CVE-2008-6756 – Normal mode : ZoneMinder 1.23.3 on Gentoo Linux stores /etc/zm.conf with 0644 permissions, allowing any local user to read the file and exfiltrate the database username and password. The impact is a local confidentiality exposure of DB credentials. No remediation details are provi...
Adobe Reader 'spell.customDictionaryOpen()' JavaScript Function Remote Code Execution Vulnerability
Description Adobe Reader is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application or crash the application, denying service to legitimate users. Reader 8.1.4 for Linux is vulnerable; oth...
FreeBSD : proxytunnel -- format string vulnerability (50744596-368f-11d9-a9e7-0001020eed82)
A Gentoo Linux Security Advisory reports : Florian Schilhabel of the Gentoo Linux Security Audit project found a format string vulnerability in Proxytunnel. When the program is started in daemon mode -a port, it improperly logs invalid proxy answers to syslog. A malicious remote server could send...
CUPS '_cupsImageReadTIFF()'整数溢出漏洞
BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...
[ GLSA 200904-19 ] LittleCMS: Multiple vulnerabilities
Gentoo Linux Security Advisory GLSA 200904-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
[ GLSA 200904-15 ] mpg123: User-assisted execution of arbitrary code
Gentoo Linux Security Advisory GLSA 200904-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
[ GLSA 200904-01 ] Openfire: Multiple vulnerabilities
Gentoo Linux Security Advisory GLSA 200904-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
GLSA-200904-04 : WeeChat: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200904-04 WeeChat: Denial of Service Sebastien Helleu reported an array out-of-bounds error in the colored message handling. Impact : A remote attacker could send a specially crafted PRIVMSG command, possibly leading to a Denial o...