DSA-878-1 netpbm-free - buffer overflow

Bulletin has no description...

DSA-874-1 lynx - buffer overflow

Bulletin has no description...

DSA-858-1 xloadimage - buffer overflows

Bulletin has no description...

DSA-845-1 mason - programming error

Bulletin has no description...

DSA-816-1 xfree86 - integer overflow

Bulletin has no description...

EMC Legato Networker Multiple Vulnerabilities

The remote host is running one of the following products : - Legato Networker - Sun StorEdge Enterprise Backup Software - Sun Solstice Backup Software - Informix Storage Manager The installed version of this software is vulnerable to denial of service, unauthorized access and remote command...

DSA-797-2 zsync - buffer overflow

zsync, a file transfer program, includes a modified local copy of the zlib library, and is vulnerable to certain bugs fixed previously in the zlib package. There was a build error for the sarge i386 proftpd packages released in DSA 797-1. A new build, zsync\0.3.3-1.sarge.1.2, has been prepared to...

DSA-791-1 maildrop - missing privilege release

Bulletin has no description...

DSA-788-1 kismet - several

Bulletin has no description...

Allegro Software RomPager 2.10 Malformed Authentication Request DoS

The remote host is running Allegro Software RomPager version 2.10, according to its banner. This version is vulnerable to a denial of service attack that can be exploited by sending a specifically crafted request to crash the affected system. Sarju Bhagat GPLv2 include"compat.inc"; ifdescription...

DSA-764-1 cacti - several

Bulletin has no description...

invisionXSSSQL.txt

GulfTech Security Research June 7th, 2005 Vendor : Invision Power Services URL : http://www.invisionblog.com Version : All Versions Prior To 1.1.2 Final Risk : Multiple Vulnerabilities Description: Invision Blog is a community based blogging software that can be integrated into Invision Power...

TFTPD small overflow

It is possible to crash the remote TFTP server by sending a small UDP packet. A remote attacker could exploit this to crash the service. This script was written by Josh Zlatin-Amishav GNU Public Licence GPLv2 This plugin is just a very slightly modified version of tftpdoverflow.nasl...

DSA-709-1 libexif - buffer overflow

Bulletin has no description...

Sylpheed, Sylpheed-claws: Buffer overflow on message display

Background Sylpheed is a lightweight email client and newsreader. Sylpheed-claws is a 'bleeding edge' version of Sylpheed. Description Sylpheed and Sylpheed-claws fail to properly handle messages containing attachments with MIME-encoded filenames. Impact An attacker can send a malicious email...

DSA-662-2 squirrelmail - several

Andrew Archibald discovered that the last update to squirrelmail which was intended to fix several problems caused a regression which got exposed when the user hits a session timeout. For completeness below is the original advisory text: Several vulnerabilities have been discovered in...

Moderate: Red Hat Security Advisory: mc security update

Updated mc packages that fix multiple security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Midnight Commander mc is a visual shell, much like a file manager. Several format string bugs were found in Midnight...

xv: Filename handling vulnerability

Background xv is an interactive image manipulation package for X11. Description Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw in the handling of image filenames by xv. Impact Successful exploitation would require a victim to process a specially crafted image with a...

Low: Red Hat Security Advisory: kdenetwork security update

Updated kdenetwork packages that fix a file descriptor leak are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The kdenetwork packages contain a collection of networking applications for the K Desktop Environment. A bug was found in t...

Critical: Red Hat Security Advisory: RealPlayer security update

An updated RealPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player. A stack based buffer overflow bug was found in RealPlayer's Synchronized...