Ubuntu 8.04 LTS : pan vulnerability (USN-845-1)

Pavel Polischouk discovered that Pan incorrectly handled certain data structures. If a user were tricked into viewing malicious nntp data, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. Note that Tenable...

USN-845-1: Pan vulnerability

Pavel Polischouk discovered that Pan incorrectly handled certain data structures. If a user were tricked into viewing malicious nntp data, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program...

Mandriva Linux Security Advisory : pan (MDVSA-2008:201)

Pavel Polischouk found a boundary error in the PartsBatch class in the Pan newsreader when processing .nzb files, which could allow remote attackers to cause a denial of serice application crash or possibly execute arbitrary code via a crafted .nzb file CVE-2008-2363. The updated packages have be...

Mandriva Update for pan MDVSA-2008:201 (pan)

Check for the Version of pan OpenVAS Vulnerability Test Mandriva Update for pan MDVSA-2008:201 pan Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for pan MDVSA-2008:201 (pan)

Check for the Version of pan OpenVAS Vulnerability Test Mandriva Update for pan MDVSA-2008:201 pan Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Joomla Component Volunteer 2.0 (job_id) SQL Injection Vulnerability

No description provided by source. Joomla Component comvolunteerjobid SQL-injection Author : boom3rang Site : www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! nameVolunteer/name !...

Joomla! Component Volunteer 2.0 - SQL Injection

Joomla Component comvolunteerjobid SQL-injection Author : boom3rang Site : www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! Volunteer ! 05.04.2007 ! John Pan ! [email protected] ! 2.0 Example:...

Gentoo Security Advisory GLSA 200807-15 (pan)

The remote host is missing updates announced in advisory GLSA 200807-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200807-15 (pan)

The remote host is missing updates announced in advisory GLSA 200807-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware 12.0 / 12.1 / current : pan (SSA:2008-217-02)

New pan packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-217-02. The text itself is copyright C...

[slackware-security] pan

New pan packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2363 Here are the details from the Slackware 12.1 ChangeLog:...

pan newsreader buffer overflow

Buffer overflow on .nzb files parsing...

[ GLSA 200807-15 ] Pan: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200807-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200807-15 : Pan: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200807-15 Pan: User-assisted execution of arbitrary code Pavel Polischouk reported a boundary error in the PartsBatch class when processing .nzb files. Impact : A remote attacker could entice a user to open a specially crafted .nz...

Pan: User-assisted execution of arbitrary code

Background Pan is a newsreader for the GNOME desktop. Description Pavel Polischouk reported a boundary error in the PartsBatch class when processing .nzb files. Impact A remote attacker could entice a user to open a specially crafted .nzb file, possibly resulting in the remote execution of...

openSUSE 10 Security Update : pan (pan-5325)

Specially crafted nzb files could trigger a heap based buffer overflow that could potentially be exploited to execute arbitrary code CVE-2008-2363. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Heap overflow

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow...

CVE-2008-2363

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow...

DEBIAN-CVE-2008-2363

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow...

CVE-2008-2363

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow...