Important: Red Hat Security Advisory: imlib security update

An updated imlib package that fixes several heap overflows is now available. Imlib is an image loading and rendering library. Several heap overflow flaws were found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it could cause an applicati...

Fedora Core 1 : lha-1.14i-12.2 (2004-294)

Lukasz Wojtow discovered a stack-based buffer overflow in all versions of lha up to and including version 1.14. A carefully created archive could allow an attacker to execute arbitrary code when a victim extracts or tests the archive. The Common Vulnerabilities and Exposures project cve.mitre.org...

[SA12430] Winzip Unspecified Multiple Buffer Overflow Vulnerabilities

TITLE: Winzip Unspecified Multiple Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA12430 VERIFY ADVISORY: http://secunia.com/advisories/12430/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: WinZip 9.x http://secunia.com/product/567/ WinZip 8.x...

Mandrake Linux Security Advisory : libneon (MDKSA-2004:032)

A number of various format string vulnerabilities were discovered in the error output handling of Neon, the HTTP and WebDAV client library, by Thomas Wana. These problems affect all versions of Neon from 0.19.0 up to and including 0.24.4. All users are encouraged to upgrade. All client software...

SUSE-SA:2003:029: pptpd

The remote host is missing the patch for the advisory SUSE-SA:2003:029 pptpd. The PPTP daemon contains a remotely exploitable buffer overflow which was introduced due to a integer overflow in the third argument passed to the read library call. This bug has been fixed. Since there is no workaround...

SuSE-SA:2004:013: cvs

The remote host is missing the patch for the advisory SuSE-SA:2004:013 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. Stefan Esser reported buffer overflow conditions within the cvs program. They allow remote attackers to...

SUSE-SA:2003:037: pine

The remote host is missing the patch for the advisory SUSE-SA:2003:037 pine. The well known and widely used mail client pine is vulnerable to a buffer overflow. The vulnerability exists in the code processing 'message/external-body' type messages. It allows remote attackers to execute arbitrary...

Solaris 9 (sparc) : 116340-09

SunOS 5.9: gzip and Freeware info files patch. Date this patch was last updated by Sun : May/05/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

[SECURITY] [DSA 530-1] New l2tpd packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 530-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...

DSA-528 ethereal - denial of service

Bulletin has no description...

Microsoft Security Bulletin MS04-022 Vulnerability in Task Scheduler Could Allow Code Execution (841873)

Microsoft Security Bulletin MS04-022 Vulnerability in Task Scheduler Could Allow Code Execution 841873 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

Solaris 2.6 (x86) : 106640-07

SunOS 5.6x86: rpcmod patch. Date this patch was last updated by Sun : Sep/05/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 2.5.1 (x86) : 111280-01

SunOS 5.5.1x86: in.fingerd can store a NULL after end of an array. Date this patch was last updated by Sun : Apr/25/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 2.5.1 (sparc) : 104613-01

SunOS 5.5.1: /usr/lib/newsyslog patch. Date this patch was last updated by Sun : Feb/28/97 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (x86) : 105406-03

SunOS 5.6x86: libcurses.a & libcurses.so.1 patch. Date this patch was last updated by Sun : Mar/09/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ...

RHEL 2.1 : libpng (RHSA-2002:152)

Updated libpng packages are available that fix a buffer overflow vulnerability. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. Versions of libpng prio...

DSA-526 webmin - several vulnerabilities

Bulletin has no description...

DSA-525 apache - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 513-1] New log2mail packages fix format string vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 513-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 3rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 513-1] New log2mail packages fix format string vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 513-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 3rd, 2004 http://www.debian.org/security/faq -...