3864 matches found
Debian DSA-1305-1 : icedove - several vulnerabilities
Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1558 Gatan Leurent discovered a cryptographical weakness in APOP...
Re: [Full-disclosure] screen 4.0.3 local Authentication Bypass
-----Original Message----- Subject: Re: Full-disclosure screen 4.0.3 local Authentication Bypass Verified on OpenBSD I'm not seeing a 'Getpass error' message on 4.1-STABLE current, but there does seem to be a problem with locking and reattaching: $ screen space $ echo "This is the locked screen"...
CVE-2007-2849
KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...
Authorization
KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...
[SECURITY] [DSA 1291-3] New samba packages fix regression
-------------------------------------------------------------------------- Debian Security Advisory DSA 1291-3 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 20th, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability
------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...
DSA-1292-1 qt4-x11
Bulletin has no description...
DSA-1288-1 pptpd
Bulletin has no description...
DSA-1284-1 qemu
Bulletin has no description...
tomcat -- multiple vulnerabilities
Apache Project reports: The Apache Tomcat team is proud to announce the immediate availability of Tomcat 4.1.36 stable. This build contains numerous library updates, A small number of bug fixes and two important security fixes...
DSA-1279-1 webcalendar - missing input sanitising
Bulletin has no description...
DSA-1275-1 zope2.7 - cross-site scripting
Bulletin has no description...
dproxy-nexgen (Linux x86) - Remote Buffer Overflow
/ dproxy-v1.c Copyright c 2007 by dproxy-nexgen remote root exploit x86-lnx by mu-b - Mar 2007 - Tested on: dproxy-nexgen .tar.gz This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation;...
DSA-1273-1 nas - several vulnerabilities
Bulletin has no description...
Debian DSA-1272-1 : tcpdump - buffer overflow
Moritz Jodeit discovered an off-by-one buffer overflow in tcpdump, a powerful tool for network monitoring and data acquisition, which allows denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
Debian DSA-1268-1 : libwpd - integer overflow
iDefense reported several integer overflow bugs in libwpd, a library for handling WordPerfect documents. Attackers were able to exploit these with carefully crafted Word Perfect files that could cause an application linked with libwpd to crash or possibly execute arbitrary code. %NASLMINLEVEL 703...
DSA-1266-1 gnupg - several vulnerabilities
Bulletin has no description...
Debian DSA-1262-1 : gnomemeeting - format string
'Mu Security' discovered that a format string vulnerability in the VoIP solution GnomeMeeting allows the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1262...
[Full-disclosure] Multiple vulnerabilities in phpMyVisites
Multiple vulnerabilities in phpMyVisites Application : phpMyVisites prior to 2.2 stable Release Date : 11 February 2007 Author : Nicob nicob at nicob.net Abstract : ========== Several vulnerabilities were identified in phpMyVisites. This software is "a free and powerful open source GNU/GPL softwa...