GLSA-200409-11 : star: Suid root vulnerability

The remote host is affected by the vulnerability described in GLSA-200409-11 star: Suid root vulnerability A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact : Attackers with local user level access could potentially gain root level...

Ethereal fails to properly handle malformed iSNS packets

Overview Ethereal contains a vulnerability in the way it processes Internet Storage Name Service iSNS packets. Description The Internet Storage Name Service iSNS protocol is used to automate the discovery, management, and configuration of iSCSI and Fibre Channel devices in an IP network. Ethereal...

GLSA-200407-23 : SoX: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200407-23 SoX: Multiple buffer overflows Ulf Harnhammar discovered two buffer overflows in the sox and play commands when handling WAV files with specially crafted header fields. Impact : By enticing a user to play or convert a...

GLSA-200403-03 : Multiple OpenSSL Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200403-03 Multiple OpenSSL Vulnerabilities Testing performed by the OpenSSL group using the Codenomicon TLS Test Tool uncovered a NULL pointer assignment in the dochangecipherspec function. A remote attacker could perform a...

GLSA-200402-02 : XFree86 Font Information File Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200402-02 XFree86 Font Information File Buffer Overflow Exploitation of a buffer overflow in The XFree86 Window System discovered by iDefence allows local attackers to gain root privileges. The problem exists in the parsing of the...

GLSA-200401-04 : GAIM 0.75 Remote overflows

The remote host is affected by the vulnerability described in GLSA-200401-04 GAIM 0.75 Remote overflows Yahoo changed the authentication methods to their IM servers, rendering GAIM useless. The GAIM team released a rushed release solving this issue, however, at the same time a code audit revealed...

GLSA-200402-07 : Clam Antivirus DoS vulnerability

The remote host is affected by the vulnerability described in GLSA-200402-07 Clam Antivirus DoS vulnerability Oliver Eikemeier of Fillmore Labs discovered the overflow in Clam AV 0.65 when it handled malformed UUEncoded messages, causing the daemon to shut down. The problem originated in libclama...

GLSA-200403-05 : UUDeview MIME Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200403-05 UUDeview MIME Buffer Overflow By decoding a MIME archive with excessively long strings for various parameters, it is possible to crash UUDeview, or cause it to execute arbitrary code. This vulnerability was originally...

DSA-541 icecast-server - cross site scripting

Bulletin has no description...

DSA-539 kdelibs - denial of service

Bulletin has no description...

DSA-540 mysql-dfsg - insecure file creation

Bulletin has no description...

phpMyFAQ index.php action Parameter Local File Inclusion

The version of phpMyFAQ on the remote host contains a flaw that may lead to an unauthorized information disclosure. The problem is that user input passed to the 'action' parameter is not properly verified before being used to include files, which could allow a remote attacker to view any accessib...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2002:075)

A buffer overflow vulnerability exists in nssldap versions prior to 198. When nssldap is configured without a value for the 'host' keyword, it attempts to configure itself using SRV records stored in DNS. nssldap does not check that the data returned by the DNS query will fit into an internal...

Multiple Cisco ONS control cards fail to properly handle malformed IP packets

Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...

Multiple Cisco ONS control cards fail to properly handle malformed ICMP packets

Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...

Multiple Cisco ONS control cards fail to properly handle invalid TCP responses

Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...

Multiple Cisco ONS control cards fail to properly handle malformed UDP packets

Overview A vulnerability exists in multiple control cards used by Cisco ONS devices. This vulnerability could allow a remote attacker to cause a denial-of-service condition. Description Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data...

PHP: Multiple security vulnerabilities

Background PHP is a general-purpose scripting language widely used to develop web-based applications. It can run inside a web server using the modphp module or the CGI version of PHP, or can run stand-alone in a CLI. Description Several security vulnerabilities were found and fixed in version 4.3...

Comersus Cart Cross-Site Scripting Vulnerability

Comersus Cart Cross-Site Scripting Vulnerability Release Date: July 6, 2004 Severity: High Vendor: Comersus Open Technologies Software: Tested on Comersus Cart 5.09 Previous versions may also be affected. Remote: Remotely executed from any web browser Technical Details: The malicious user is able...

RHEL 3 : openoffice.org (RHSA-2004:160)

Updated OpenOffice packages that fix a vulnerability in neon exploitable by a malicious DAV server are now available. OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. OpenOffice internally uses inbuilt code from neon, an HTTP and WebDAV client...