MDKA-2006:015 : gthumb

A bug was discovered in gthumb were the UI User Interface can get corrupted when importing photos in some non-UTF8 locales such as French. Some text strings returned from libgphoto where not converted into UTF-8 before being used by GTK+. Updated packages have been patched to correct the issue...

MDKA-2005:042 : mozilla-thunderbird-nb

Due to a packaging bug, the mozilla-thunderbird-nb package could not be installed. This update corrects the bug allowing the package to be installed. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. ...

Mandrake Linux Security Advisory : tetex (MDKSA-2007:022)

The Adobe PDF specification 1.3, as implemented by xpdf 3.0.1 patch 2, kpdf in KDE before 3.5.5, and other products, allows remote attackers to have an unknown impact, possibly including denial of service infinite loop, arbitrary code execution, or memory corruption, via a PDF file with a 1 craft...

SUSE-SA:2007:007: cacti

The remote host is missing the patch for the advisory SUSE-SA:2007:007 cacti. A command injection in cmd.php in cacti was fixed, which might have allowed remote attackers to inject commands and so execute code. This issue is tracked by the Mitre CVE ID CVE-2006-6799. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2006:205)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 1.5.0.8. This update provides the latest Firefox to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandrake Linux Security Advisory : smb4k (MDKSA-2007:042)

Kees Cook performed an audit on the Smb4K program and discovered a number of vulnerabilities and security weaknesses that have been addressed and corrected in Smb4K 0.8.0 which is being provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

Fedora Core 4 : libwmf-0.2.8.3-8.1 (2006-804)

CVE-2006-3376 integer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Core 4 : libwmf-0.2.8.3-8.2 (2006-832)

CVE-2006-3376: fix minor side-effect on 64bit platforms Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Core 4 : cyrus-sasl-2.1.20-6 (2006-515)

This update incorporates a fix for a bug which would allow a client which attempted DIGEST-MD5 authentication with a server to cause the DIGEST-MD5 plugin on the server to crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora Core 5 : squirrelmail-1.4.8-1.fc5 (2006-913)

Upstream's 1.4.8 release fixes more bugs and solves CVE-2006-4019 security issue. Fedora's package also contains numerous language specific fixes. See RPM %changelog for more details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...

Fedora Core 4 : xorg-x11-6.8.2-37.FC4.49.2.1 (2006-484)

A buffer overflow in the X server RENDER extension implementation, documented in CVE-2006-1526 has been fixed in this release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

Fedora Core 5 : libwmf-0.2.8.4-5.1 (2006-805)

CVE-2006-3376 int overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

Fedora Core 4 : vnc-4.1.1-10.1.fc4 (2006-557)

Security update: by altering a client it was possible to bypass password authentication in vnc. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possib...

Fedora Core 6 : dbus-1.0.1-8.fc6 (2006-1475)

Kimmo Hamalainen reported a DoS flaw in D-Bus that can cause a local user to disable the the ability of another process to receive certain messages. This flaw does not contain any potential for arbitrary code execution. Note that Tenable Network Security has extracted the preceding description...

Fedora Core 5 : mysql-5.0.22-1.FC5.1 (2006-702)

Repairs vulnerability in multibyte string escaping. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Core 4 : kernel-2.6.17-1.2141_FC4 (2006-769)

An update to the latest upstream stable release 2.6.17.3, which fixes a security issue with SCTP. Further details: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.2 Note that Tenable Network Security has extracted the...

Fedora Core 5 : krb5-1.4.3-5.1 (2006-905)

This update addresses MITKRB-SA-2006-001. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora Core 4 : ImageMagick-6.2.2.0-3.fc4.2 (2006-587)

ImageMagick's DisplayImageCommand contains a heap overflow flaw. It is possible to pass an unexpanded glob to ImageMagick which will be expanded by ImageMagick and overflow heap memory. The updated package fixes this problem. Note that Tenable Network Security has extracted the preceding...

Fedora Core 5 : texinfo-4.8-9.2.fc5.2 (2006-1202)

Sun Nov 5 2006 Miloslav Trmac - 4.8-9.2.fc5.2 - Remove off-line sorting from texindex fixes CVE-2006-4810 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

berlios.meta.txt

package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' = 1, 'UserOpts' =...