[SECURITY] [DSA 228-1] New libmcrypt packages fix buffer overflows and memory leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 228-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2003 http://www.debian.org/security/faq -...

Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings! A quite well known i.e. ancient type of proxy vulnerability was found for TrendMicro's InterScan VirusWall V3.6 This general problem has been known to be an issue with plain HTTP proxies like the Squid for ages e.g...

Security Update: [CSSA-2002-048.0] Linux: wwwoffled remote access vulnerability

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: wwwoffled remote access vulnerability Advisory number: CSSA-2002-048.0 Issue date: 2002 November 18 Cross reference: 1. Problem...

Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment (PXE) server denial-of-service attacks

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: Preboot eXecution Environment PXE server denial-of-service attacks Advisory number: CSSA-2002-044.0 Issue date: 2002 November 11 Cross...

[SNS Advisory No.57] AN HTTPD Cross-site Scripting Vulnerability

---------------------------------------------------------------------- SNS Advisory No.57 AN HTTPD Cross-site Scripting Vulnerability Problem first discovered: Wed, 23 Oct 2002 Published: Mon, 28 Oct 2002 Reference: http://www.lac.co.jp/security/english/snsadve/57e.html...

NetBSD Security Advisory 2002-019: Buffer overrun in talkd

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-019 ================================= Topic: Buffer overrun in talkd Version: NetBSD-current: source prior to September 20, 2002 NetBSD 1.6: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected NetBSD-1.5.1: affected NetBSD-1.5:...

DSA-171 fetchmail - buffer overflows

Bulletin has no description...

Important: Red Hat Security Advisory: : Updated gaim client fixes URL vulnerability

Updated gaim packages are now available for Red Hat Powertools 7. These updates fix a vulnerability in the URL handler. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prior to 0.59.1 conta...

Moderate: Red Hat Security Advisory: apache security update

The Apache Web server contains a security vulnerability which can be used to launch a denial of service DoS attack or, in some cases, allow remote code execution. Versions of the Apache Web server up to and including 1.3.24 contain a bug in the routines which deal with requests using "chunked"...

ymxp.txt

Yahoo! Messenger 5,0,0,1061 Buffer Overflow Exploit for Win XP Pro Intro: Proof of concept code for YM Buffer Overflow as discovered in: http://packetstorm.decepticons.org/advisories/misc/yahoo-im.txt Code flow: Overwrite EIP at 218 Point EIP to a "RET" in the memory "RET" jumps to beginning of...

Moderate: Red Hat Security Advisory: : : : Vulnerability in zlib library

Update 20 Mar 2002: Added kernel packages for Red Hat Linux 6.2 on sparc64. Updated VNC packages as the previous fix caused another denial of service vulnerability; thanks to Const Kaplinsky for reporting this Update 14 Mar 2002: Updated kernel packages for Red Hat Linux 6.2 and 7.0 which were...

KLA10345 SB vulnerability in SUN JRE & JDK

An unspecified vulnerability was found in Sun JRE & JDK. By exploiting this vulnerability malicious users can access the clipboard. This vulnerability can be exploited remotely via a specially designed applet. Original advisories - Exploitation Public exploits exist for this vulnerability. Relate...

SuSE Security Announcement: susehelp

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: susehelp Announcement-ID: SuSE-SA:2001:041 Date: Thu Nov 22 11:36:00 MET 2001 Affected SuSE versions: 7.2, 7.3 Vulnerability Type: remote command execution Severity 1-10: 8 SuSE default package: yes Other affected systems: no...

OpenSSL PRNG contains design flaw that allows a user to determine internal state and predict future output

Overview The pseudorandom number generator PRNG in OpenSSL has a weakness that allows an attacker to determine its internal state and subsequently determine its future output values. Description OpenSSL's PRNG hashes an internal state to produce output values, which are supposed to be pseudorando...

6Tunnel 0.60.70.8 - Connection Close State Denial of Service

6Tunnel 0.60.70.8 - Connection Close State Denial of Service // source: https://www.securityfocus.com/bid/3467/info 6tunnel is a freely available, open source software package designed to provide IPv6 functionality to hosts that do not comply with the standard. It works by creating IPv6 tunnels. ...

Cayman gateways vulnerable to a denial of service via oversized ICMP echo (ping) requests.

Overview Cayman gateways vulnerable to a denial of service via oversized ICMP echo ping requests. Installing the newest version of the vendor software will resolve this vulnerability. Description Cayman gateways running versions 5.5 Build R0, 5.3 Build R2, 5.3 Build R1 are vulnerable to an...

PT-2001-1056 · Mit · Krb5-Configs +5

Name of the Vulnerable Software and Affected Versions: krb5-workstation versions 1.1.1 through 1.2.2 krb5-configs version 1.1.1 krb5-devel versions 1.1.1 through 1.2.2 krb5-server versions 1.1.1 through 1.2.2 krb5-libs version 1.1.1 krb5 version 1.1.1 through 1.2.2 Description: The issue affects...

NewsDaemon does not adequately filter user input to $user_username

Overview NewsDaemon prior to version 0.21b contains a vulnerability allowing remote attackers to gain administrative access to the web site. Description NewsDaemon is a PHP-based tool used to allow readers to submit and comments on news items and stories over the web. It also allows for...

CHINANSL Security Advisory(CSA-200106)

Topic: JavaServer Web Dev KitJSWDK1.0.1 for win2000 Directory traversal Vulnerability vulnerable: Microsoft Win2000 ЎЎЎЎ+JSWDK1.0.1 maybe for other operating system also. discussion: A security vulnerability has been found in Windows NT/2000 systems that have JSWDK 1.0.1 installed.The vulnerabili...

FreeBSD-SA-00:81.ethereal

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:81 Security Advisory FreeBSD, Inc. Topic: ethereal allows remote code execution Category: ports Module: ethereal Announced: 2000-12-20 Credits: [email protected] Affects:...