1204 matches found
SuSE-SA:2004:006: xf86/XFree86
The remote host is missing the patch for the advisory SuSE-SA:2004:006 xf86/XFree86. XFree86 is an open source X Window System implementation that acts as a client-server-based API between different hardware components like display, mouse, keyboard and so on. Several buffer overflows were found i...
SUSE-SA:2003:024: openssl
The remote host is missing the patch for the advisory SUSE-SA:2003:024 openssl. Researchers from the University of Stanford have discovered certain weaknesses in OpenSSL's RSA decryption algorithm. It allows remote attackers to compute the private RSA key of a server by observing its timing...
SUSE-SA:2002:048: cyrus-imapd
The remote host is missing the patch for the advisory SUSE-SA:2002:048 cyrus-imapd. The cyrus imapd contains a buffer overflow which could be exploited by remote attackers prior to logging in. Attackers could generate oversized error messages and overflow buffers inside imapd. Additionally to thi...
SuSE-SA:2003:045: hylafax
The remote host is missing the patch for the advisory SuSE-SA:2003:045 hylafax. Hylafax is an Open Source fax server which allows sharing of fax equipment among computers by offering its service to clients by a protocol similar to FTP. The SuSE Security Team found a format bug condition during a...
SUSE-SA:2003:040: sendmail, sendmail-tls
The remote host is missing the patch for the advisory SUSE-SA:2003:040 sendmail, sendmail-tls. sendmail is the most widely used mail transport agent MTA in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SUSE products. These versions...
SUSE-SA:2003:0004: libpng
The remote host is missing the patch for the advisory SUSE-SA:2003:0004 libpng. The library libpng provides several functions to encode, decode and manipulate Portable Network Graphics PNG image files. Due to wrong calculation of some loop offset values a buffer overflow can occur. The buffer...
SUSE-SA:2003:0010: libmcrypt
The remote host is missing the patch for the advisory SUSE-SA:2003:0010 libmcrypt. Libmcrypt is a data encryption library that is able to load crypto- modules at run-time by using libltdl. Versions of libmcrypt prior to 2.5.5 include several buffer overflows that can be triggered by passing very...
SUSE-SA:2002:043: traceroute-nanog/nkitb
The remote host is missing the patch for the advisory SUSE-SA:2002:043 traceroute-nanog/nkitb. Traceroute is a tool that can be used to track packets in a TCP/IP network to determine it's route or to find out about not working routers. Traceroute-nanog requires root privilege to open a raw socket...
DSA-524 rlpr - several vulnerabilities
Bulletin has no description...
DSA-428 slocate - buffer overflow
Bulletin has no description...
[SECURITY] [DSA 424-1] New mc packages fix buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 424-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 16th, 2004 http://www.debian.org/security/faq -...
DSA-381 mysql - buffer overflow
Bulletin has no description...
[SECURITY] [DSA-346-1] New phpsysinfo packages fix directory traversal
-------------------------------------------------------------------------- Debian Security Advisory DSA 346-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...
DSA-346 phpsysinfo - directory traversal
Bulletin has no description...
DSA-322 typespeed - buffer overflow
Bulletin has no description...
[SECURITY] [DSA 156-1] New Light package fixes arbitrary script execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 156-1 [email protected] http://www.debian.org/security/ Martin Schulze August 22th, 2002 http://www.debian.org/security/faq -...
Roxen security alert: URL decoding vulnerable
Roxen Webserver 2.0 up to version 2.0.92 and 2.1 up to version 2.1.264 has a vulnerability that allows any user to retrieve any file from the host with the privileges of the web server. Having the CGI-module enabled escalates the problem by making it possible to run any executable. Description In...
Security Announcement: tnef
-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: tnef 0-124 Date: Mon Jul 10 19:19:16 CEST 2000 Affected SuSE versions: 6.3-6.4 Vulnerability Type: remote compromise SuSE default package: no Other affected systems: all unix systems using this package A security hole was...
xfree86.suse.txt
Date: Sun, 28 Mar 1999 23:20:58 +0200 From: Marc Heuse To: [email protected] Subject: SuSE Security Announcement - XFree86 -----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: xf86-3.3.3-5 Date: Sun Mar 28 12:26:39 CEST 1999 Affected: unix operating systems using xfree86 A...