Debian 'login' 本地权限升级漏洞

Debian is prone to a local privilege-escalation vulnerability because of an error in the 'login' program. Local attackers in the UTMP group could exploit this issue to take ownership of arbitrary files on the vulnerable system. This may lead to a complete compromise of the system. Debian Linux 3....

apt-listchanges不安全路径库导入本地SHELL代码执行漏洞

apt-listchanges是一款使用当前安装来对比新版本的工具。 apt-listchanges当导入部分库的时候使用不安全路径，本地攻击者可以利用漏洞以应用程序进程权限执行任意SHELL代码。 目前没有详细漏洞细节提供。 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32...

[SECURITY] [DSA 1426-1] New qt-x11-free packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1426-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 08, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1329-1] New gfax packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1329-1 [email protected] http://www.debian.org/security/ Steve Kemp July 05, 2007 - ------------------------------------------------------------------------ Package : gfax Vulnerability :...

KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞

JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题，本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...

[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite

------------------------------------------------------------------------ Debian Security Advisory DSA-1223-1 [email protected] http://www.debian.org/security/ Noah Meyerhans December 01, 2006 - ------------------------------------------------------------------------ Package : tar Vulnerability...

[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite

------------------------------------------------------------------------ Debian Security Advisory DSA-1223-1 [email protected] http://www.debian.org/security/ Noah Meyerhans December 01, 2006 - ------------------------------------------------------------------------ Package : tar Vulnerability...

PSToText文件名处理shell命令执行漏洞

PSToText是一款从PostScript 和PDF档案中提取出文字的程序。 PSToText不正确处理文件名数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意shell命令。 攻击者需要构建恶意文件名，诱使用户处理来触发，目前没有详细漏洞细节提供。 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Lin...

[SECURITY] [DSA 738-1] New razor packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 738-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 029-2] New proftpd packages for m68k available

---------------------------------------------------------------------------- Debian Security Advisory DSA-029-2 [email protected] http://www.debian.org/security/ Martin Schulze March 6, 2001 - ---------------------------------------------------------------------------- Package : proftpd...

[SECURITY] [DSA 030-2] New m68k packages of XFree86 released

---------------------------------------------------------------------------- Debian Security Advisory DSA 030-2 [email protected] http://www.debian.org/security/ Martin Schulze February 12, 2001 - ---------------------------------------------------------------------------- Package : xfree86-1...