[SECURITY] Fedora 13 Update: nss_db-2.2.3-0.3.pre1.fc13

Nssdb is a set of C library extensions which allow Berkeley Databases to be used as a primary source of aliases, ethers, groups, hosts, networks, protocol, users, RPCs, services, and shadow passwords instead of or in addition to using flat files or NIS. Install nssdb if your flat name service fil...

[SECURITY] Fedora 13 Update: squid-3.1.0.16-7.fc13

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : vim vulnerabilities (USN-712-1)

Jan Minar discovered that Vim did not properly sanitize inputs before invoking the execute or system functions inside Vim scripts. If a user were tricked into running Vim scripts with a specially crafted input, an attacker could execute arbitrary code with the privileges of the user invoking the...

Debian DSA-1733-1 : vim - several vulnerabilities

Several vulnerabilities have been found in vim, an enhanced vi editor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2712 Jan Minar discovered that vim did not properly sanitise inputs before invoking the execute or system functions inside vim...

Fedora Update for squid FEDORA-2007-4170

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2007-4170 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

SuSE 10 Security Update : perl-Net-DNS (ZYPP Patch Number 4046)

perl-Net-DNS used sequential IDs for DNS lookups which could cause problem with some programs like spamassassin. It potentially also simplified DNS spoofing attacks against perl-Net-DNS. CVE-2007-3377 Additionally malformed compressed DNS packets could trigger an endless loop in perl-Net-DNS...

DEBIAN-CVE-2007-3115

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

Design/Logic Flaw

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

CVE-2007-3115

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

CVE-2007-3115

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

CVE-2007-3115

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

CVE-2007-3115: Undefined Security Weakness

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

CVE-2006-5835: Undefined Security Weakness

The Notes Remote Procedure Call NRPC protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file...

CVE-2005-2019: Undefined Security Weakness

ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor SMP or Uni Processor UP systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent...

CVE-2005-1797

The design of Advanced Encryption Standard AES, aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations...

CVE-2005-1797

The design of Advanced Encryption Standard AES, aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations...

Security fix for the ALT Linux 8 package squid version 2.5.STABLE9-alt3

May 12, 2005 Denis Ovsienko 2.5.STABLE9-alt3 - applied: + 2005-04-20 14:59 Medium Fails to process requests for files larger than 2GB in size + 2005-03-26 23:53 Minor rename related cleanup + 2005-03-29 09:52 Cosmetic New cachemgr pendingobjects and clientobjects actions + 2005-03-30 22:51 Cosmet...

CVE-2005-1519: Undefined Security Weakness

Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups...

Moderate: Red Hat Security Advisory: squid security update

Updated squid packages that fix a denial of service issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team Squid is a full-featured Web proxy cache. A bug was found in the way Squid handles FQDN lookups. It was possible to cra...

DOS against Java JNDI/DNS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iKu Advisory Product : Java Runtime Environment Date : November 8th 2004 Affected versions : 1.4.2, 1.5.0, probably more Vulnerability Type : remote denial of service Severity 1-10 : 3 Remote : yes 0. contents 1. problem description 2. symptoms 3. bug...