334 matches found
GNU Findutils release 4.2.31 fixes CVE-2007-2452 (GNU locate heap buffer overrun)
$Revision: 1.4 $; $Date: 2007/05/30 22:04:52 $ I. BACKGROUND ============= GNU findutils is a set of programs which search for files on Unix-like systems. It is maintained by the GNU Project of the Free Software Foundation. For more information, see http://www.gnu.org/software/findutils. II...
[SECURITY] Fedora Core 5 Update: dovecot-1.0-0.beta8.3.fc5
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats...
GNU tar: Buffer overflow
Background GNU tar is the standard GNU utility for creating and manipulating tar archives, a common format used for creating backups and distributing files on UNIX-like systems. Description Jim Meyering discovered a flaw in the handling of certain header fields that could result in a buffer...
Clam AntiVirus vulnerable to memory corruption via specially crafted UPX packed file
Overview A vulnerability in the ClamAV antivirus toolkit may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Clam AntiVirus is an antivirus toolkit for Unix-like systems that is commonly integrated with mail servers for email attachment scanning. It supports ...
Wine: Windows Metafile SETABORTPROC vulnerability
Background Wine is a free implementation of Windows APIs for Unix-like systems. Description H D Moore discovered that Wine implements the insecure-by-design SETABORTPROC GDI Escape function for Windows Metafile WMF files. Impact An attacker could entice a user to open a specially crafted Windows...
Asterisk vmail.cgi vulnerability
Assurance.com.au - Vulnerability Advisory ----------------------------------------------- Release Date: 07-Nov-2005 Software: Asterisk Web-VoiceMail Comedian VoiceMail http://www.asterisk.org/ Asterisk is a complete PBX in software. It runs on Linux, BSD and MacOSX and provides all of the feature...
ClamAV < 0.86.3 Content-parsing Multiple Overflows (deprecated)
Binary data 3229.prm...
Debian DSA-701-2 : samba - integer overflows
It has been discovered that the last security update for Samba, a LanManager like file and printer server for GNU/Linux and Unix-like systems caused the daemon to crash upon reload. This has been fixed. For reference below is the original advisory text : Greg MacManus discovered an integer overfl...
DSA-701-1 samba - integer overflows
Bulletin has no description...
[Full-Disclosure] GNATS (The GNU bug-tracking system) multiple buffer overflow vulnerabilities.
======================================== INetCop Security Advisory 2003-0x82-018 ======================================== Title: GNATS The GNU bug-tracking system multiple buffer overflow vulnerabilities. 0x01. Description About: GNATS is a portable incident/bug report/help request-tracking syste...
Fake Identd - Remote root exploit
Date: 07/29/2002 Product: fakeidentd Summary: remote root exploit ---------------------------- Overview ---------------------------- Fake Identd is a small standalone ident server with static replies. It is designed to be suitable for firewalls, IP masquerading hosts, etc. Documentation :...
ACME Labs thttpd 2.20 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/4601/info thttpd is a web server product maintained by ACME Labs. thttpd has been compiled for Linux, BSD and Solaris, as well as other Unix like operating systems. Cross Site Scripting issues has been reported in some versions of thttpd. thttpd fails to...
RedHat 6.27.0 Tmpwatch - Arbitrary Command Execution
RedHat 6.27.0 Tmpwatch - Arbitrary Command Execution // source: https://www.securityfocus.com/bid/1785/info A vulnerability exists in tmpwatch, a utility which automates the removal of temporary files in unix-like systems. An optional component of tmpwatch, fuser, improperly handles arguments to...
University of Washington pop2d 4.46/4.51/4.54/4.55 - Remote File Read
source: https://www.securityfocus.com/bid/1484/info A vulnerability exists in versions of the ipop2d daemon, through version 4.55. ipop2d is part of the University of Washington imap package. Versions through 4.7c of the imap package are affected. Any user who has a pop account on the machine can...