Debian DSA-100-1 : gzip - Potential buffer overflow

GOBBLES found a buffer overflow in gzip that occurs when compressing files with really long filenames. Even though GOBBLES claims to have developed an exploit to take advantage of this bug, it has been said by others that this problem is not likely to be exploitable as other security incidents...

Debian DSA-485-1 : ssmtp - format string

Max Vozeler discovered two format string vulnerabilities in ssmtp, a simple mail transport agent. Untrusted values in the functions die and logevent were passed to printf-like functions as format strings. These vulnerabilities could potentially be exploited by a remote mail relay to gain the...

Debian DSA-387-1 : gopher - buffer overflows

gopherd, a gopher server from the University of Minnesota, contains a number of buffer overflows which could be exploited by a remote attacker to execute arbitrary code with the privileges of the gopherd process the 'gopher' user by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Debian DSA-362-1 : mindi - insecure temporary file

mindi, a program for creating boot/root disks, does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running mindi. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-510-1 : jftpgw - format string

[email protected] discovered a vulnerability in jftpgw, an FTP proxy program, whereby a remote user could potentially cause arbitrary code to be executed with the privileges of the jftpgw server process. By default, the server runs as user 'nobody'. CAN-2004-0448: format string vulnerabilit...

Debian DSA-429-1 : gnupg - cryptographic weakness

Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing. This is a significant security failure which can lead to a compromise of almost all ElGamal keys used for signing. This update disables the use of this type of key. %NASLMINLEVEL 70300 C Tenable Netwo...

[SA12397] Samba Printer Change Notification Request Denial of Service Vulnerability

TITLE: Samba Printer Change Notification Request Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12397 VERIFY ADVISORY: http://secunia.com/advisories/12397/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Samba 2.x http://secunia.com/product/1271/ DESCRIPTION: A...

phpGroupWare index.php Addressbook XSS

The remote host seems to be running PhpGroupWare, a multi-user groupware suite written in PHP. This version is reportedly prone to multiple HTML injection vulnerabilities. The issues present themselves due to a lack of sufficient input validation performed on form fields used by PHPGroupWare...

Opera < 7.50 File Download Extension Spoofing

The version of Opera installed on the remote host contains a flaw that may allow a malicious user to trick a user into running arbitrary code. The issue is triggered when an malicious website provides a file for download, but crafts the filename in such a way that the file is executed, rather tha...

Mandrake Linux Security Advisory : phpgroupware (MDKSA-2003:077)

Several vulnerabilities were discovered in all versions of phpgroupware prior to 0.9.14.006. This latest version fixes an exploitable condition in all versions that can be exploited remotely without authentication and can lead to arbitrary code execution on the web server. This vulnerability is...

Subversion: Vulnerability in mod_authz_svn

Background Subversion is an advanced version control system, similar to CVS, which supports additional functionality such as the ability to move, copy and delete files and directories. A Subversion server may be run as an Apache module, a standalone server svnserve, or on-demand over ssh a la CVS...

SUSE-SA:2003:005: susehelp

The remote host is missing the patch for the advisory SUSE-SA:2003:005 susehelp. During a code review of the susehelp package the SUSE Security Team recognized that the security checks done by the susehelp CGI scripts are insufficient. Remote attackers can insert certain characters in CGI queries...

SUSE-SA:2002:032: xf86

The remote host is missing the patch for the advisory SUSE-SA:2002:032 xf86. The xf86 package contains various libraries and programs which are fundamental for the X server to function. The libX11.so library from this package dynamically loads other libraries where the pathname is controlled by t...

SUSE-SA:2003:003: mysql

The remote host is missing the patch for the advisory SUSE-SA:2003:003 mysql. Stefan Esser from e-matters reported various bugs in MySQL. Within the MySQL server the password checking and a signedness issue has been fixed. These could lead to a remote compromise of the system running an unpatched...

SUSE-SA:2003:031: nfs-utils

The remote host is missing the patch for the advisory SUSE-SA:2003:031 nfs-utils. The nfs-utils package contains various programs to offer and manage certain RPC services such as the rpc.mountd. iSEC Security Research has reported an off-by-one bug in the xlog function used by the rpc.mountd. It ...

Fedora Core 2 : ethereal-0.10.3-2.1 (2004-153)

Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...

DSA-534 mailreader - directory traversal

Bulletin has no description...

DSA-533 courier - cross-site scripting

Bulletin has no description...

Microsoft Security Bulletin MS04-023

Microsoft Security Bulletin MS04-023 Vulnerability in HTML Help Could Allow Code Execution 840315 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

Microsoft Security Bulletin MS04-019 Vulnerability in Utility Manager Could Allow Code Execution &#40;842526&#41;

Microsoft Security Bulletin MS04-019 Vulnerability in Utility Manager Could Allow Code Execution 842526 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® 2000 Impact of Vulnerability: Local Elevation of Privilege Maximum Severity Ratin...