1952 matches found
DSA-674-2 mailman - cross-site scripting, directory traversal
Due to an incompatibility between Python 1.5 and 2.1 the last mailman update did not run with Python 1.5 anymore. This problem is corrected with this update. This advisory only updates the packages updated with DSA 674-2. The version in unstable is not affected since it is not supposed to work wi...
OpenConnect Webconnect MS-DOS device name denial-of-service
Overview OpenConnect WebConnect may stop responding after processing an HTTP request with an MS-DOS device name in it. Description OpenConnect Webconnect provides secured web access and emulation services for backend mainframes and UNIX servers. Versions of Webconnect prior to 6.4.5 and 6.5.1...
Moderate: Red Hat Security Advisory: ImageMagick security update
Updated ImageMagick packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the X Window System. Andrei...
Important: Red Hat Security Advisory: xemacs security update
Updated XEmacs packages that fix a string format issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. XEmacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler...
Important: Red Hat Security Advisory: xpdf security update
An updated xpdf package that fixes several security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based viewer for Portable Document Format PDF files. A buffer overflow flaw was found in th...
DSA-680-1 htdig - unsanitised input
Bulletin has no description...
ht://Dig: Cross-site scripting vulnerability
Background ht://Dig is an HTTP/HTML indexing and searching system. Description Michael Krax discovered that ht://Dig fails to validate the 'config' parameter before displaying an error message containing the parameter. This flaw could allow an attacker to conduct cross-site scripting attacks...
DSA-673-1 evolution - integer overflow
Bulletin has no description...
DSA-675-1 hztty - privilege escalation
Bulletin has no description...
Claroline add_course.php Multiple Parameter XSS
The remote version of Claroline fails to sanitize user input to several parameters of the 'addcourse.php' script. Using a specially crafted URL, an attacker may be able to exploit this issue to perform cross-site scripting attacks against users of the affected application. %NASLMINLEVEL 70300 C...
DSA-668-1 postgresql - privilege escalation
Bulletin has no description...
DSA-663-1 prozilla - buffer overflows
Bulletin has no description...
List of all admin accounts in phpBB
After discovering 'highlight' vulnerability in phpBB, many forums were patched, but... it is possible that attackers created a secret admin accounts... It is very hard to find secret admin accounts if the forum has too many users... you must check every account... So, here is a simple PHP script,...
Cisco IOS IPv6 denial-of-service vulnerability
Overview A vulnerability in the way Cisco IOS handles IPv6 packets could result in a remotely exploitable denial of service. Description The Cisco Internetwork Operating System IOS includes support for processing Internet Protocol version 6 IPv6 packets. A vulnerability in the way that IOS handle...
Cisco IOS vulnerable to DoS via malformed BGP packet
Overview A vulnerability in Cisco's Internetwork Operating System IOS could result in a remotely exploitable denial of service. Description Cisco Internetwork Operating System IOS includes support for Border Gateway Protocol BGP, which is defined in RFC 1771. BGP is designed to exchange network...
DSA-656-1 vdr - insecure file access
Bulletin has no description...
Cisco IOS embedded call processing solutions contain unspecified DoS vulnerability
Overview An unspecified error in Cisco Internetwork Operating System IOS could allow a remote attacker to cause a denial of service. Description Cisco IOS is a very widely deployed network operating system. IOS release trains 12.1YD, 12.2T, 12.3, and 12.3T, when configured for the IOS Telephony...
DSA-649-1 xtrlock - buffer overflow
Bulletin has no description...