CVE-2006-5466

The CVE-2006-5466 issue is a heap-based buffer overflow in librpm.showQueryPackage of RPM Package Manager 4.4.8, triggered when LANG is set to ru_RU.UTF-8. This could enable user-assisted arbitrary code execution via crafted RPM packages. Connected advisories confirm the affected component and ro...

USN-378-1: RPM vulnerability

An error was found in the RPM library's handling of query reports. In some locales, certain RPM packages would cause the library to crash. If a user was tricked into querying a specially crafted RPM package, the flaw could be exploited to execute arbitrary code with the user's privileges...

Mandrake Linux Security Advisory : xine-lib (MDKSA-2006:121)

Stack-based buffer overflow in MiMMS 0.0.9 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via the 1 sendcommand, 2 stringutf16, 3 getdata, and 4 getmediapacket functions, and possibly other functions. Xine-lib contains an embedded copy o...

Mandrake Linux Security Advisory : MySQL (MDKSA-2006:064)

MySQL allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysqlrealquery function. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Fedora Core 5 : beagle-0.2.3-4 (2006-188)

Some of the wrapper scripts including beagle-status looked in the current directory for files with a specific name and ran that instead of the binary in the path. All such cases have been fixed in this release. Note that Tenable Network Security has extracted the preceding description block...

MDKSA-2006:045 : MySQL

Eric Romang discovered a temporary file vulnerability in the mysqlinstalldb script provided with MySQL. This vulnerability only affects versions of MySQL 4.1.x prior to 4.1.12. The updated packages have been patched to address this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Fedora Core 4 : xpdf-3.01-0.FC4.8 (2006-104)

xpdf contains a heap based buffer overflow in the splash rasterizer engine that can crash kpdf or even execute arbitrary code. Users impacted by these issues, should update to this new package release. Note that Tenable Network Security has extracted the preceding description block directly from...

[Full-disclosure] cPanel Multiple Cross Site Scripting Vulnerability

Title: cPanel Multiple Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk simoatmorxorg Discovered: 22 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Web Hosting Manager Vendor: cPanel Vulnerability: Cross Site Scripting / Cookie-Theft /...

LibAST 0.7 Release Fixes Security Vulnerability

I am pleased to announce the release of LibAST 0.7. The release summary is below. Please note that this release contains an important security fix; all users of LibAST are STRONGLY encouraged to update to this latest version immediately. The latest version can be obtained in source, RPM, and SRPM...

Ubuntu 4.10 / 5.04 / 5.10 : rpm vulnerability (USN-151-4)

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Since lsb-rpm is statically linked against the zlib library, it is also affected by these issues. The updated...

Fedora Core 3 : cups-1.1.22-0.rc1.8.8 (2005-1141)

This update fixes a security problem in the pdftops filter CVE-2005-3191, CVE-2005-3192, CVE-2005-3193. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

CVE-2002-2204

The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicious package comes from a trusted source...

CVE-2002-2204

CVE-2002-2204 affects the RPM Package Manager, specifically version 4.0.4 . The vulnerability stems from the default --checksig setting, which verifies a package’s signature validity without listing who signed it, enabling remote attackers to make a malicious package appear to originate from a tr...

SUSE-SA:2005:064: pwdutils, shadow

The remote host is missing the patch for the advisory SUSE-SA:2005:064 pwdutils, shadow. Thomas Gerisch found that the setuid 'chfn' program contained in the pwdutils suite insufficiently checks it's arguments when changing the GECOS field. This bug leads to a trivially exploitable local privileg...

USN-151-4: rpm vulnerability

USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Since lsb-rpm is statically linked against the zlib library, it is also affected by these issues. The updated...

Fedora Core 4 : openldap-2.2.29-1.FC4 (2005-992)

This is an experimental upgrade of OpenLDAP to 2.2.29 for FC4. Before I push it to final, I need some confirmation that upgrading to it will not break existing configurations. If I don't hear any objections, I should push it to final in a week or so. Note that Tenable Network Security has extract...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2005:190)

A bug was found in the way the pamldap module processed certain failure messages. If the server includes supplemental data in an authentication failure result message, but the data does not include any specific error code, the pamldap module would proceed as if the authentication request had...

SUSE-SA:2005:053: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:053 squid. This update of the Squid web-proxy fixes two remotely exploitable denial of service vulnerabilities. One can be triggered by aborting a request CVE-2005-2794 due to a faulty assertion. The other one occurs in...

Mandrake Linux Security Advisory : kdeedu (MDKSA-2005:159)

Ben Burton notified the KDE security team about several tempfile handling related vulnerabilities in langen2kvtml, a conversion script for kvoctrain. This vulnerability was initially discovered by Javier Fernndez-Sanguino Pea. The script uses known filenames in /tmp which allow an local attacker ...

Mandrake Linux Security Advisory : bluez-utils (MDKSA-2005:150)

A vulnerability in bluez-utils was discovered by Henryk Plotz. Due to missing input sanitizing, it was possible for an attacker to execute arbitrary commands supplied as a device name from the remote bluetooth device. The updated packages have been patched to correct this problem. %NASLMINLEVEL...