[SECURITY] [DSA 256-1] New mhc-utils packages fix predictable temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 256-1 [email protected] http://www.debian.org/security/ Martin Schulze February 28th, 2003 http://www.debian.org/security/faq -...

BitKeeper remote shell command execution/local vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: BitKeeper remote shell command execution/local vulnerability Product: BitKeeper http://www.bitkeeper.com Version: 3.0.x Author: Maurycy Prodeus [email protected] Date: 11 November 2002 Issue: - ------ BitKeeper is a source management software. It...

[SECURITY] [DSA 192-2] New html2ps packages correct fix against arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 192-2 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2002 ://www.debian.org/security/faq -...

[SECURITY] [DSA 198-1] New nullmailer packages fix local denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 198-1 [email protected] http://www.debian.org/security/ Martin Schulze November 18th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 198-1] New nullmailer packages fix local denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 198-1 [email protected] http://www.debian.org/security/ Martin Schulze November 18th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 192-1] New html2ps packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 192-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 192-1] New html2ps packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 192-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2002 http://www.debian.org/security/faq -...

[security bulletin] SSRT2371 HP OpenVMS Potential POP server local vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN REVISION: 0 Title: SSRT2371 HP OpenVMS Potential POP server local vulnerability NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. RELEASE DATE: September 2002 SEVERITY:...

[SECURITY] [DSA 144-1] New wwwoffle packages fix security related problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 144-1 [email protected] http://www.debian.org/security/ Martin Schulze August 6th, 2002 - -------------------------------------------------------------------------- Package : wwwoffle...

Informix SE-7.25 /lib/sqlexec Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Title: Local Vulnerability in Informix SE-7.25 Date: 21-04-2002 Platform: Only tested in Linux but can be exported to others. Impact: Users with exec perm over /lib/sqlexec can obtain euid=0 Author: Juan Manuel Pascual Escriba [email protected] Status: Vendor...

Instant Web Mail additional POP3 commands and mail headers

Instant Web Mail additional POP3 commands and mail headers PROGRAM: Instant Web Mail VENDOR: Jonas Koch Bentzen [email protected] HOMEPAGE: http://understroem.dk/instantwebmail/ VULNERABLE VERSIONS: 0.59 possibly earlier versions too TYPE: remote/local SEVERITY: medium DESCRIPTION: "Instant We...

[SECURITY] [DSA 107-1] New jgroff packages fix printf format problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 107-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2002 - -------------------------------------------------------------------------- Package : jgroff...

Buffer overflow vulnerability in pwck command line utility

Overview The CERT/CC has received a public report of a local buffer overflow vulnerability in the pwck utility. Description The pwck utility performs syntax checking of /etc/password and /etc/shadow password information files. This utility contains a buffer overflow vulnerability in the section o...

MacOS 9.2, Internet Explorer, Local Vulnerability

Vulnerability: Access controls can be evaded on MacOS9.2 using Internet Explorer, allowing users to execute programs they otherwise would not be able to run. Details: While in the college media lab I attempted to run MacSSH to get onto my home desktop, I received an error message telling me I did...

Local Vulnerability in dbsnmp binary in Oracle 8.1.6 - 8.1.7 - 9i

WWW.PLAZASITE.COM Systems & Security Division Title: Local Vulnerability in dbsnmp binary Date: 13-07-2001 Platform: Only tested in Linux but can be exported to others. Impact: Users belonging to oracle group can obtain euid=0 Author: Juan Manuel Pascual Escriba [email protected] Status: Vendor...

Microsoft IIS 4.05.0 - Device File Local Denial of Service

Microsoft IIS 4.05.0 - Device File Local Denial of Service source: https://www.securityfocus.com/bid/2973/info Microsoft IIS is prone to denial of service attacks by local users. This issue is exploitable if the local attacker can create an .asp file which makes calls to various devices names. Th...

Локальная дырка в Cisco Content Services (Arrowpoint) (debug mode)

Пользователь может переключится в режим отладки, из которого получить административные привелегии...

[SECURITY] [DSA 038-1] New version of sgml-tools available

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-038-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8, 2001 -...

Локальная дырка в Sendmail (sendmail -bt)

Отрицательный индекс массива позволяет переписать область памяти...

IBM NetCommerce Security

hola friends, while i was participating on the openhack contest i found a couple of serious security-holes within ibm s so called "netcommerce" thing which seems to be a mixture of websphere, net.data, servlets, jsp s and db2? however..summary: class: input validation error remote: yes local: yes...