Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RHEL 4 : nss_ldap (RHSA-2008:0715)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

Moderate: Red Hat Security Advisory: mysql security, bug fix, and enhancement update

Updated mysql packages that fix various security issues, several bugs, and add an enhancement are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database...

Low: Red Hat Security Advisory: nss_ldap security and bug fix update

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...

CERT-FI Vulnerability Advisory on OpenSSL

CERT-FI Vulnerability Advisory on OpenSSL Version Information Advisory Reference FICORA 130450 Release Date 28 May 2008 10:30 UTC Last Revision 28 May 2008 Version Number 1.1 Acknowledgement Vulnerabilities were discovered by Ossi Herrala and Jukka Taimisto from the CROSS project at Codenomicon...

OpenSSL多个拒绝服务漏洞

BUGTRAQ ID: 29405 CVECAN ID: CVE-2008-0891,CVE-2008-1672 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL在处理畸形的连接时存在漏洞，远程攻击者可能利用此漏洞导致服务器程序崩溃。 当用以下命令行运行OpenSSL时： openssl sserver -key pathtokey \ -cert pathtocertificate \ -www openssl ciphers 'ALL:COMPLEMENTOFALL' 如果接收到的Client...

RHEL 5 : dovecot (RHSA-2008:0297)

An updated dovecot package that fixes several security issues and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Dovecot is an IMAP server for Linux and UNIX-like systems, primarily...

Low: Red Hat Security Advisory: dovecot security and bug fix update

An updated dovecot package that fixes several security issues and various bugs is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Dovecot is an IMAP server for Linux and UNIX-like systems, primarily...

CERT-FI Vulnerability Advisory on GnuTLS

CERT-FI Vulnerability Advisory on GnuTLS Version Information Advisory Reference FICORA 130447 Release Date 19 May 2008 12:00 UTC Last Revision 19 May 2008 Version Number 1.0 Acknowledgement Vulnerabilities were discovered by Ossi Herrala and Jukka Taimisto from the CROSS project at Codenomicon...

Buffer overflow attack-vulnerability warning-the black bar safety net

Buffer overflow is a variousoperating system, application software widespread common and dangerous vulnerability, using a buffer overflow attack may cause a program to fail, system crash and other consequences. More seriously, you can use it to perform unauthorized instructions, and even acquire...

Re: [securityreason] *BSD libc (strfmon) Multiple vulnerabilities

On Mar 27, 2:09pm, [email protected] [email protected] wrote: -- Subject: securityreason BSD libc strfmon Multiple vulnerabilities ... stuff deleted ... | Problem exist also in printf function. | | Example code will show Integer Overflow . | | - ---example-start-- | include stdio.h | ...

{securityreason.com}PHP 5 *printf() - Integer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.2.5 and prior : printf functions Integer Overflow Author: Maksymilian Arciemowicz cXIb8O3 SecurityReason.com and SecurityReason.pl Date: - - Written: 01.03.2008 - - Public: 20.03.2008 SecurityReason Research SecurityAlert Id: 52 CVE-2008-1384...

*BSD user-ppp local root (when conditions permit)

// / pppx.conf - Point to Point Protocol a.k.a. user-ppp exploit by sipher / / 2003 / 12 /23 - PRIVATE CODE / / Program terminated with signal 11, Segmentation fault. / / 0 0xbeefdead in ?? / // I just tested this on FreeBSD 6.3. This bug was discovered on NetBSD. It also works on OpenBSD...

libgd Denial of service by corrupted GIF images

Array index error in gdgifin.c in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash and heap corruption via large color index values in crafted image data, which results in a segmentation fault...

Tk GIF processing buffer overflow

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

Fedora 7 : perl-Tk-804.028-3.fc7 (2008-1384)

Tue Feb 5 2008 Andreas Bierfert - 804.028-3 - fix 431529 gif overflow in tk see also 431518 - Fri Jan 4 2008 Andreas Bierfert - 804.028-2 - add relevant parts of debian patch - add patch for 235666 - Wed Jan 2 2008 Andreas Bierfert - 804.028-1 - version upgrade - fix 210718 SIGSEGV on exit from...

Debian Security Advisory DSA 1107-1 (gnupg)

The remote host is missing an update to gnupg announced via advisory DSA 1107-1. Evgeny Legerov discovered that gnupg, the GNU privacy guard, a free PGP replacement contains an integer overflow that can cause a segmentation fault and possibly overwrite memory via a large user ID strings. For the...

Debian Security Advisory DSA 028-1 (man-db)

The remote host is missing an update to man-db announced via advisory DSA 028-1. OpenVAS Vulnerability Test $Id: deb0281.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 028-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 244-1 (noffle)

The remote host is missing an update to noffle announced via advisory DSA 244-1. OpenVAS Vulnerability Test $Id: deb2441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 244-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 379-1 (sane-backends)

The remote host is missing an update to sane-backends announced via advisory DSA 379-1. OpenVAS Vulnerability Test $Id: deb3791.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 379-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...