Slackware 10.0 / 10.1 / 9.1 / current : Mozilla/Firefox/Thunderbird (SSA:2005-085-01)

New Mozilla packages are available for Slackware 9.1, 10.0, 10.1, and -current to fix various security issues and bugs. See the Mozilla site for a complete list of the issues patched: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlMo zilla Also updated are Firefox and...

PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability

Background The PEAR XML-RPC and phpxmlrpc libraries are both PHP implementations of the XML-RPC protocol. Description James Bercegay of GulfTech Security Research discovered that the PEAR XML-RPC and phpxmlrpc libraries fail to sanatize input sent using the "POST" method. Impact A remote attacker...

glibc, nptl, nscd security update

CentOS Errata and Security Advisory CESA-2005:256 Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by...

CVE-2005-0627

Qt before 3.3.4 searches the BUILDPREFIX directory, which could be world-writable, to load shared libraries regardless of the LDLIBRARYPATH environment variable, which allows local users to execute arbitrary programs...

CVE-2005-0227

PostgreSQL pgsql 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD extension...

CVE-2005-0385

Buffer overflow in luxman before 0.41, if used with certain insecure svgalib libraries, allows local users to execute arbitrary code via a long -f command line argument...

CVE-2005-0710

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udfinit function...

CVE-2005-0627

Qt before 3.3.4 searches the BUILDPREFIX directory, which could be world-writable, to load shared libraries regardless of the LDLIBRARYPATH environment variable, which allows local users to execute arbitrary programs...

security flaw

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udfinit function...

HP-UX PHNE_28490 : HP-UX DNS and Resolver Libraries, Remote Execution of Arbitrary Code, Denial of Service (DoS) (HPSBUX00209 SSRT2316 rev.17)

s700800 11.22 Bind 9.2.0 components : Potential buffer overflows in DNS resolver libraries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE28490. The text itself is copyright C Hewlett-Packard Development...

HP-UX Security patch : PHSS_9804

The remote host is missing HP-UX Security Patch number PHSS9804 . Buffer overflows in X11/Motif libraries %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17569; scriptversion"1.6";...

HP-UX Security patch : PHSS_9805

The remote host is missing HP-UX Security Patch number PHSS9805 . Buffer overflows in X11/Motif libraries %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17570; scriptversion"1.6";...

HP-UX Security patch : PHSS_11629

The remote host is missing HP-UX Security Patch number PHSS11629 . Buffer overflows in X11/Motif libraries %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17434; scriptversion"1.6";...

HP-UX Security patch : PHSS_11044

The remote host is missing HP-UX Security Patch number PHSS11044 . Buffer overflows in X11/Motif libraries %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17432; scriptversion"1.7";...

HP-UX Security patch : PHSS_11630

The remote host is missing HP-UX Security Patch number PHSS11630 . Buffer overflows in X11/Motif libraries %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17435; scriptversion"1.6";...

HP-UX Security patch : PHSS_11045

The remote host is missing HP-UX Security Patch number PHSS11045 . Buffer overflows in X11/Motif libraries %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17433; scriptversion"1.6";...

HP-UX Security patch : PHSS_11043

The remote host is missing HP-UX Security Patch number PHSS11043 . Buffer overflows in X11/Motif libraries %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16489; scriptversion"1.7";...

HP-UX Security patch : PHSS_11021

The remote host is missing HP-UX Security Patch number PHSS11021 . Buffer overflows in X11/Motif libraries %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16490; scriptversion"1.7";...

HP-UX PHSS_28682 : s700_800 11.22 CDE Base Periodic Patch

s700800 11.22 CDE Base Periodic Patch : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerabilities in CDE libraries and programs. HPSBUX00263 SSRT2373 - There is a buffer overflow in libDtSvc. HPSBUX00308 SSRT3492 %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHNE_27796 : HP-UX DNS and Resolver Libraries, Remote Execution of Arbitrary Code, Denial of Service (DoS) (HPSBUX00209 SSRT2316 rev.17)

s700800 11.11 libnssdns DNS backend patch : Potential buffer overflows in DNS resolver libraries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE27796. The text itself is copyright C Hewlett-Packard...