[slackware-security] expat

New expat packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/expat-2.0.1-i486-2slack13.1.txz: Upgraded. Fixed various crash and hang bugs. For more information, see:...

Ubuntu Update for openjdk-6, openjdk-6b18 vulnerabilities USN-1055-1

Ubuntu Update for Linux kernel vulnerabilities USN-1055-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10551.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for openjdk-6, openjdk-6b18 vulnerabilities USN-1055-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks Gmb...

Ubuntu: Security Advisory (USN-1055-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a denial of service security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/pidgin-2.7.9-i486-1slack13.1.txz: Upgraded. Fixed denial-of-service flaw in the MSN...

Mandriva Linux Security Advisory : bind (MDVSA-2010:253)

Multiple vulnerabilities were discovered and corrected in bind : named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote...

Bind: DoS (assertion failure) via a DNS query with bad signatures

ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service daemon crash via a DNS query...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/mozilla-firefox-3.6.13-i686-1.txz: Upgraded. This fixes some security issues. For more information, see:...

ProFTPD 1.3.3c compromised source remote root Trojan

Exploit for php platform in category remote exploits ==================================================== ProFTPD 1.3.3c compromised source remote root Trojan ==================================================== == ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC...

ProFTPD 1.3.3c Trojan Source Code

== ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemon to gain access to the server and used their privileges to replace...

CVE-2010-4020

MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...

CVE-2010-4020

MIT Kerberos 5 (krb5) 1.8.x–1.8.3 is affected by CVE-2010-4020 due to not rejecting RC4 key-derivation checksums, enabling remote authenticated users to forge AD-SIGNEDPATH or AD-KDC-ISSUED signatures and potentially gain privileges. Mitigation/advisories reference MITKRB5-SA-2010-007 and patches...

ProFTPd 1.3.3c - Compromised Source Backdoor Remote Code Execution

== ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemon to gain access to the server and used their privileges to replace...

krb5 -- RFC 3961 key-derivation checksum handling vulnerability

The MIT Kerberos team reports: MIT krb5 releases incorrectly accepts RFC 3961 key-derivation checksums using RC4 keys when verifying AD-SIGNEDPATH and AD-KDC-ISSUED authorization data. An authenticated remote attacker that controls a legitimate service principal has a 1/256 chance of forging the...

zScaler: Resurgent Lethic using Stuxnet Tricks

Newly detected versions of the Lethic botnet are digitally signed using stolen credentials similar to those used by the Stuxnet worm, according to a blog post from Web security firm zScaler. In a blog post Wednesday, zScaler Senior Security Researcher Mike Geide said the company had intercepted n...

MD5: MD5 Message-Digest Algorithm is not collision resistant

The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/pidgin-2.7.5-i486-1slack13.1.txz: Upgraded. This update addresses some denial of service bugs. For more...

SuSE 10 Security Update : evolution-data-server (ZYPP Patch Number 7029)

The following bugs have been fixed : evolution considered S/MIME signatures to be valid even for modified mails CVE-2009-0547. specially crafted base64 encoded messages could cause a heap buffer overflow CVE-2009-0587. A POP3 server sending overly long lines could crash evolution. %NASLMINLEVEL...

Foxit Releases Foxit Reader 4.2

Foxit has released Foxit Reader 4.2 to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, compromise the digital signature of PDF signatures or cause a denial-of-service condition. US-CERT encourages users and administrators to...

Foxit Reader < 4.2.0.0928 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 4.2.0.0928. It is, therefore, affected by multiple vulnerabilities : - A stack buffer overflow condition exists due to improper sanitization of the file title. An attacker can exploit this, via a specially crafted PDF...