Mandrake Linux Security Advisory : samba (MDKSA-2004:131)

Karol Wiesek discovered a bug in the input validation routines in Samba 3.x used to match filename strings containing wildcard characters. This bug may allow a user to consume more than normal amounts of CPU cycles which would impact the performance and response of the server. In some cases it...

Debian DSA-589-1 : libgd1 - integer overflows

'infamous41md' discovered several integer overflows in the PNG image decoding routines of the GD graphics library. This could lead to the execution of arbitrary code on the victim's machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

[SA13091] Moodle Unspecified SQL Injection Vulnerabilities

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Solaris 9 (sparc) : 117455-01

SunOS 5.9: in.rwhod Patch. Date this patch was last updated by Sun : Nov/01/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

[ GLSA 200411-02 ] Cherokee: Format string vulnerability

Gentoo Linux Security Advisory GLSA 200411-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Mandrake Linux Security Advisory : mpg123 (MDKSA-2004:120)

Carlos Barros discovered two buffer overflow vulnerabilities in mpg123; the first in the getauthfromURL function and the second in the httpopen function. These vulnerabilities could be exploited to possibly execute arbitrary code with the privileges of the user running mpg123. The provided packag...

[SA13012] TortoiseCVS "SSH2_MSG_DEBUG" Packet Handling Buffer Overflow

TITLE: TortoiseCVS "SSH2MSGDEBUG" Packet Handling Buffer Overflow SECUNIA ADVISORY ID: SA13012 VERIFY ADVISORY: http://secunia.com/advisories/13012/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: TortoiseCVS 1.x http://secunia.com/product/4183/ DESCRIPTION: A...

[SA12995] ImageMagick EXIF Parser Buffer Overflow Vulnerability

TITLE: ImageMagick EXIF Parser Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12995 VERIFY ADVISORY: http://secunia.com/advisories/12995/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: ImageMagick 6.x http://secunia.com/product/3763/ DESCRIPTION: A vulnerabilit...

[SA12965] SKForum Unspecified "my wiki" and "wiki" Vulnerability

TITLE: SKForum Unspecified "my wiki" and "wiki" Vulnerability SECUNIA ADVISORY ID: SA12965 VERIFY ADVISORY: http://secunia.com/advisories/12965/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: SKForum 1.x http://secunia.com/product/4140/ DESCRIPTION: A vulnerability wit...

Important: Red Hat Security Advisory: squid security update

An updated squid package that fixes a remote denial of service vulnerability is now avaliable. Squid is a full-featured Web proxy cache. iDEFENSE reported a flaw in the squid SNMP module. This flaw could allow an attacker who has the ability to send arbitrary packets to the SNMP port to restart t...

KLA10226 Multiple vulnerabilities in WahtsUp Gold

Multiple serious vulnerabilities have been found in WhatsUp Gold. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Unknown vectors can be exploited remotely via a specially designed GET request; ...

BugPort Attached File Handling Unspecified Issue

The remote host seems to be running BugPort, an open source web-based system to manage tasks and defects throughout the software development process. This version of BugPort contains an unspecified attachment handling flaw. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandrake Linux Security Advisory : cyrus-sasl (MDKSA-2004:106)

A vulnerability was discovered in the libsasl library of cyrus-sasl. libsasl honors the SASLPATH environment variable blindly, which could allow a local user to create a malicious 'library' that would get executed with the effective ID of SASL when anything calls libsasl. The provided packages ar...

[SA12728] Online-Bookmarks Security Bypass Vulnerability

TITLE: Online-Bookmarks Security Bypass Vulnerability SECUNIA ADVISORY ID: SA12728 VERIFY ADVISORY: http://secunia.com/advisories/12728/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Online-Bookmarks 0.x http://secunia.com/product/4005/ DESCRIPTION: A vulnerability...

RHEL 3 : squid (RHSA-2004:462)

An updated squid package that fixes a security vulnerability in the NTLM authentication helper is now available. Squid is a full-featured Web proxy cache. An out of bounds memory read bug was found within the NTLM authentication helper routine. If Squid is configured to use the NTLM authenticatio...

Debian DSA-160-1 : scrollkeeper - insecure temporary file creation

Spybreak discovered a problem in scrollkeeper, a free electronic cataloging system for documentation. The scrollkeeper-get-cl program creates temporary files in an insecure manner in /tmp using guessable filenames. Since scrollkeeper is called automatically when a user logs into a Gnome session, ...

Debian DSA-166-1 : purity - buffer overflows

Two buffer overflows have been discovered in purity, a game for nerds and hackers, which is installed setgid games on a Debian system. This problem could be exploited to gain unauthorized access to the group games. A malicious user could alter the highscore of several games. %NASLMINLEVEL 70300 C...

Debian DSA-116-1 : cfs - buffer overflow

Zorgon found several buffer overflows in cfsd, a daemon that pushes encryption services into the Unixtm file system. We are not yet sure if these overflows can successfully be exploited to gain root access to the machine running the CFS daemon. However, since cfsd can easily be forced to die, a...

Debian DSA-341-1 : liece - insecure temporary file

liece, an IRC client for Emacs, does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running Emacs and liece, potentially with contents supplied by the attacker...

Debian DSA-071-1 : fetchmail - memory corruption

Salvatore Sanfilippo found two remotely exploitable problems infetchmail while doing a security audit. In both the IMAP code and the POP3 code, the input isn't verified even though it's used to store a number in an array. Since no bounds checking is done this can be used by an attacker to write...