MDVA-2009:198 : apache

The modauthnzldap module causes a segfault if the apr-util-dbd-ldap package is not installed, this update addresses the problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network...

Mandriva Security Advisory MDVSA-2009:293 (squidGuard)

The remote host is missing an update to squidGuard announced via advisory MDVSA-2009:293. OpenVAS Vulnerability Test $Id: mdksa2009293.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:293 squidGuard Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandriva Linux Security Advisory : apache (MDVSA-2009:295)

A vulnerability was discovered and corrected in apache : Apache is affected by SSL injection or man-in-the-middle attacks due to a design flaw in the SSL and/or TLS protocols. A short term solution was released Sat Nov 07 2009 by the ASF team to mitigate these problems. Apache will now reject...

[ MDVSA-2009:295 ] apache

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:295 http://www.mandriva.com/security/ Package : apache Date : November 8, 2009 Affected: 2009.0, 2009.1, 2010.0, Corporate 3.0, Corporate 4.0, Enterprise Server 5.0, Multi Network Firewall 2.0 Problem...

MDVA-2009:183 : nvidia

This update provides the kernel modules which were not distributed with the last kernel update. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

Mandriva Linux Security Advisory : squidGuard (MDVSA-2009:293-1)

Multiple vulnerabilities has been found and corrected in squidGuard : Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service application hang or loss of blocking functionality via a long URL with many / slash characters, related to emergency mode...

Mandriva Linux Security Advisory : jetty5 (MDVSA-2009:291)

A vulnerability has been identified and corrected in jetty5 : Directory traversal vulnerability in the HTTP server in Mort Bay Jetty before 6.1.17, and 7.0.0.M2 and earlier 7.x versions, allows remote attackers to access arbitrary files via directory traversal sequences in the URI CVE-2009-1523...

Mandriva Linux Security Advisory : proftpd (MDVSA-2009:288)

A vulnerability has been identified and corrected in proftpd : The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '' character in a domain name in the Subject Alternative Name field of an X.509 client...

Mandriva Linux Security Advisory : xpdf (MDVSA-2009:287-1)

Multiple vulnerabilities has been found and corrected in xpdf : Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1 might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer...

Mandriva Linux Security Advisory : gd (MDVSA-2009:284-1)

A vulnerability has been found and corrected in gd : The gdGetColors function in gdgd.c in PHP 5.2.11 and 5.3.0, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read...

Mandriva Linux Security Advisory : php (MDVSA-2009:285)

Multiple vulnerabilities has been found and corrected in php : The gdGetColors function in gdgd.c in PHP 5.2.11 and 5.3.0, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer...

[ MDVSA-2009:284 ] gd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:284 http://www.mandriva.com/security/ Package : gd Date : October 20, 2009 Affected: 2009.0, 2009.1, Corporate 3.0, Corporate 4.0, Enterprise Server 5.0, Multi Network Firewall 2.0 Problem Description: A...

Mandrake Security Advisory MDVSA-2009:277 (samba)

The remote host is missing an update to samba announced via advisory MDVSA-2009:277. OpenVAS Vulnerability Test $Id: mdksa2009277.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:277 samba Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:277 (samba)

The remote host is missing an update to samba announced via advisory MDVSA-2009:277. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : python-django (MDVSA-2009:275)

A vulnerability has been found and corrected in python-django : The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected static media files, which allows remote attackers to conduct directory traversal attacks and read arbitrary fil...

Mandriva Linux Security Advisory : python-django (MDVSA-2009:276-1)

Multiple vulnerabilities has been found and corrected in python-django : The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected static media files, which allows remote attackers to conduct directory traversal attacks and read...

Mandriva Linux Security Advisory : compiz-fusion-plugins-main (MDVSA-2009:278)

A vulnerability has been found and corrected in compiz-fusion-plugins-main : The Expo plugin in Compiz Fusion 0.7.8 allows local users with physical access to drag the screen saver aside and access the locked desktop by using Expo mouse shortcuts, a related issue to CVE-2007-3920 CVE-2008-6514...

Mandriva Linux Security Advisory : libmikmod (MDVSA-2009:272-1)

Multiple vulnerabilities has been found and corrected in libmikmod : libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allo...

Mandriva Linux Security Advisory : wireshark (MDVSA-2009:270)

A vulnerability has been found and corrected in wireshark : Unspecified vulnerability in the OpcUa OPC UA dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service memory and CPU consumption via malformed OPCUA Service CallRequest...

Mandriva Linux Security Advisory : sympa (MDVSA-2009:263)

A vulnerability has been found and corrected in sympa : sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability CVE-2008-4476. Th...