1189 matches found
SUSE-SA:2003:0007: cvs
The remote host is missing the patch for the advisory SUSE-SA:2003:0007 cvs. CVS Concurrent Versions System is a version control system which helps to manage concurrent editing of files by various authors. Stefan Esser of e-matters reported a 'double free' bug in CVS server code for handling...
SuSE-SA:2003:044: thttpd
The remote host is missing the patch for the advisory SuSE-SA:2003:044 thttpd. Two vulnerabilities were found in the 'tiny' web-server thttpd. The first bug is a buffer overflow that can be exploited remotely to overwrite the EBP register of the stack. Due to memory-alignment of the stack done by...
SUSE-SA:2002:048: cyrus-imapd
The remote host is missing the patch for the advisory SUSE-SA:2002:048 cyrus-imapd. The cyrus imapd contains a buffer overflow which could be exploited by remote attackers prior to logging in. Attackers could generate oversized error messages and overflow buffers inside imapd. Additionally to thi...
SUSE-SA:2004:022: samba
The remote host is missing the patch for the advisory SUSE-SA:2004:022 samba. The Samba Web Administration Tool SWAT was found vulnerable to a buffer overflow in its base64 code. This buffer overflow can possibly be exploited remotely before any authentication took place to execute arbitrary code...
SuSE-SA:2003:045: hylafax
The remote host is missing the patch for the advisory SuSE-SA:2003:045 hylafax. Hylafax is an Open Source fax server which allows sharing of fax equipment among computers by offering its service to clients by a protocol similar to FTP. The SuSE Security Team found a format bug condition during a...
SuSE-SA:2004:002: tcpdump
The remote host is missing the patch for the advisory SuSE-SA:2004:002 tcpdump. Tcpdump is a well known tool for administrators to analyze network traffic. There is a bug in the tcpdump code responsible for handling ISAKMP messages. This bug allows remote attackers to destroy a current tcpdump...
SUSE-SA:2003:036: pam_smb
The remote host is missing the patch for the advisory SUSE-SA:2003:036 pamsmb. The PAM module and server pamsmb allows users of Linux systems to be authenticated by querying an NT server. Dave Airlie informed us about a bug in the authentication code of pamsmb that allows a remote attacker to gai...
SUSE-SA:2003:0010: libmcrypt
The remote host is missing the patch for the advisory SUSE-SA:2003:0010 libmcrypt. Libmcrypt is a data encryption library that is able to load crypto- modules at run-time by using libltdl. Versions of libmcrypt prior to 2.5.5 include several buffer overflows that can be triggered by passing very...
SuSE-SA:2004:018: subversion
The remote host is missing the patch for the advisory SuSE-SA:2004:018 subversion. Subversion is a version control system like the well known CVS. The subversion code is vulnerable to a remotely exploitable buffer overflow on the heap. The bug appears before any authentication took place. An...
SUSE-SA:2002:036: mod_php4
The remote host is missing the patch for the advisory SUSE-SA:2002:036 modphp4. PHP is a well known and widely used web programming language. If a PHP script runs in 'safe mode' several restrictions are applied to it including limits on execution of external programs. An attacker can pass shell...
SUSE-SA:2002:043: traceroute-nanog/nkitb
The remote host is missing the patch for the advisory SUSE-SA:2002:043 traceroute-nanog/nkitb. Traceroute is a tool that can be used to track packets in a TCP/IP network to determine it's route or to find out about not working routers. Traceroute-nanog requires root privilege to open a raw socket...
SUSE-SA:2003:022: apcupsd
The remote host is missing the patch for the advisory SUSE-SA:2003:022 apcupsd. The controlling and management daemon apcupsd for APC's Unbreakable Power Supplies is vulnerable to several buffer overflows and format bugs. These bugs can be exploited remotely by an attacker to gain root access to...
SUSE-SA:2003:016: samba, samba-client
The remote host is missing the patch for the advisory SUSE-SA:2003:016 samba, samba-client. Sebastian Krahmer, SUSE Security Team, reviewed security-critical parts of the Samba server within the scope of security audits that the SUSE Security Team conducts on a regular basis for security-critical...
DSA-524 rlpr - several vulnerabilities
Bulletin has no description...
DSA-428 slocate - buffer overflow
Bulletin has no description...
[SECURITY] [DSA 424-1] New mc packages fix buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 424-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 16th, 2004 http://www.debian.org/security/faq -...
DSA-381 mysql - buffer overflow
Bulletin has no description...
[SECURITY] [DSA-346-1] New phpsysinfo packages fix directory traversal
-------------------------------------------------------------------------- Debian Security Advisory DSA 346-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...