1983 matches found
TFTPD small overflow
It is possible to crash the remote TFTP server by sending a small UDP packet. A remote attacker could exploit this to crash the service. This script was written by Josh Zlatin-Amishav GNU Public Licence GPLv2 This plugin is just a very slightly modified version of tftpdoverflow.nasl...
DSA-709-1 libexif - buffer overflow
Bulletin has no description...
Sylpheed, Sylpheed-claws: Buffer overflow on message display
Background Sylpheed is a lightweight email client and newsreader. Sylpheed-claws is a 'bleeding edge' version of Sylpheed. Description Sylpheed and Sylpheed-claws fail to properly handle messages containing attachments with MIME-encoded filenames. Impact An attacker can send a malicious email...
DSA-662-2 squirrelmail - several
Andrew Archibald discovered that the last update to squirrelmail which was intended to fix several problems caused a regression which got exposed when the user hits a session timeout. For completeness below is the original advisory text: Several vulnerabilities have been discovered in...
Moderate: Red Hat Security Advisory: mc security update
Updated mc packages that fix multiple security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Midnight Commander mc is a visual shell, much like a file manager. Several format string bugs were found in Midnight...
xv: Filename handling vulnerability
Background xv is an interactive image manipulation package for X11. Description Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw in the handling of image filenames by xv. Impact Successful exploitation would require a victim to process a specially crafted image with a...
Low: Red Hat Security Advisory: kdenetwork security update
Updated kdenetwork packages that fix a file descriptor leak are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The kdenetwork packages contain a collection of networking applications for the K Desktop Environment. A bug was found in t...
Critical: Red Hat Security Advisory: RealPlayer security update
An updated RealPlayer package that fixes two buffer overflow issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player. A stack based buffer overflow bug was found in RealPlayer's Synchronized...
OpenConnect Webconnect MS-DOS device name denial-of-service
Overview OpenConnect WebConnect may stop responding after processing an HTTP request with an MS-DOS device name in it. Description OpenConnect Webconnect provides secured web access and emulation services for backend mainframes and UNIX servers. Versions of Webconnect prior to 6.4.5 and 6.5.1...
DSA-674-2 mailman - cross-site scripting, directory traversal
Due to an incompatibility between Python 1.5 and 2.1 the last mailman update did not run with Python 1.5 anymore. This problem is corrected with this update. This advisory only updates the packages updated with DSA 674-2. The version in unstable is not affected since it is not supposed to work wi...
Moderate: Red Hat Security Advisory: ImageMagick security update
Updated ImageMagick packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the X Window System. Andrei...
Important: Red Hat Security Advisory: xemacs security update
Updated XEmacs packages that fix a string format issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. XEmacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler...
Important: Red Hat Security Advisory: xpdf security update
An updated xpdf package that fixes several security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based viewer for Portable Document Format PDF files. A buffer overflow flaw was found in th...
DSA-680-1 htdig - unsanitised input
Bulletin has no description...
ht://Dig: Cross-site scripting vulnerability
Background ht://Dig is an HTTP/HTML indexing and searching system. Description Michael Krax discovered that ht://Dig fails to validate the 'config' parameter before displaying an error message containing the parameter. This flaw could allow an attacker to conduct cross-site scripting attacks...
DSA-673-1 evolution - integer overflow
Bulletin has no description...
DSA-675-1 hztty - privilege escalation
Bulletin has no description...
Claroline add_course.php Multiple Parameter XSS
The remote version of Claroline fails to sanitize user input to several parameters of the 'addcourse.php' script. Using a specially crafted URL, an attacker may be able to exploit this issue to perform cross-site scripting attacks against users of the affected application. %NASLMINLEVEL 70300 C...