Debian Security Advisory DSA 936-1 (libextractor)

The remote host is missing an update to libextractor announced via advisory DSA 936-1. infamous41md and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in libextractor, a library to extract arbitrary meta-data from...

Debian Security Advisory DSA 1193-1 (xfree86)

The remote host is missing an update to xfree86 announced via advisory DSA 1193-1. Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following...

Debian Security Advisory DSA 219-1 (dhcpcd)

The remote host is missing an update to dhcpcd announced via advisory DSA 219-1. OpenVAS Vulnerability Test $Id: deb2191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 219-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1170-1 (gcc-3.4)

The remote host is missing an update to gcc-3.4 announced via advisory DSA 1170-1. Jürgen Weigert discovered that upon unpacking JAR archives fastjar from the GNU Compiler Collection does not check the path for included files and allows to create or overwrite files in upper directories. OpenVAS...

Debian Security Advisory DSA 986-1 (gnutls11)

The remote host is missing an update to gnutls11 announced via advisory DSA 986-1. Evgeny Legerov discovered several out-of-bounds memory accesses in the DER decoding component component of the Tiny ASN.1 Library, which is also present and used in GnuTLS, the GNU implementation for Transport Laye...

Debian Security Advisory DSA 1167-1 (apache)

The remote host is missing an update to apache announced via advisory DSA 1167-1. Several remote vulnerabilities have been discovered in the Apache, the worlds most popular webserver, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project...

Debian Security Advisory DSA 1000-2 (libapreq2-perl)

The remote host is missing an update to libapreq2-perl announced via advisory DSA 1000-2. Gunnar Wolf noticed that the correction for the following problem was not complete and requires an update. For completeness we're providing the original problem description: An algorithm weakness has been...

Debian Security Advisory DSA 1160-1 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 1160-1. Several security related problems have been discovered in Mozilla and derived products. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2006-2779 Mozilla team members...

Debian Security Advisory DSA 656-1 (vdr)

The remote host is missing an update to vdr announced via advisory DSA 656-1. OpenVAS Vulnerability Test $Id: deb6561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 656-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

MyBB forumdisplay.php 'sortby' Parameter Arbitrary PHP Code Execution

The version of MyBB installed on the remote host is affected by an arbitrary PHP code execution vulnerability due to improper sanitization of user-supplied input to the 'sortby' parameter of the forumdisplay.php script before using it in an eval statement to evaluate PHP code. A remote,...

Debian Security Advisory DSA 282-1 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 282-1. OpenVAS Vulnerability Test $Id: deb2821.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 282-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1256-1 (gtk+2.0)

The remote host is missing an update to gtk+2.0 announced via advisory DSA 1256-1. It was discovered that the image loading code in the GTK+ graphical user interface library performs insufficient error handling when loading malformed images, which may lead to denial of service. OpenVAS...

Debian Security Advisory DSA 1051-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 1051-1. For details on the issues addressed by the missing update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb10511.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description...

Debian Security Advisory DSA 1150-1 (shadow)

The remote host is missing an update to shadow announced via advisory DSA 1150-1. A bug has been discovered in several packages that execute the setuid system call without checking for success when trying to drop privileges, which may fail with some PAM configurations. OpenVAS Vulnerability Test...

Debian Security Advisory DSA 1133-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 1133-1. Several remote vulnerabilities have been discovered in the Mantis bug tracking system, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project identifies the followi...

Debian Security Advisory DSA 659-1 (libpam-radius-auth)

The remote host is missing an update to libpam-radius-auth announced via advisory DSA 659-1. OpenVAS Vulnerability Test $Id: deb6591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 659-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 579-1 (abiword)

The remote host is missing an update to abiword announced via advisory DSA 579-1. OpenVAS Vulnerability Test $Id: deb5791.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 579-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 764-1 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 764-1. Several vulnerabilities have been discovered in cacti, a round-robin database RRD tool that helps create graphs from database information. The Common Vulnerabilities and Exposures Project identifies the following...

Debian Security Advisory DSA 592-1 (ez-ipupdate)

The remote host is missing an update to ez-ipupdate announced via advisory DSA 592-1. OpenVAS Vulnerability Test $Id: deb5921.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 592-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 810-1 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 810-1. Several problems have been discovered in Mozilla, the we browser of the Mozilla suite. Since the usual praxis of backporting apparently does not work for this package, this update is basically version 1.7.10 with th...