Important: Red Hat Security Advisory: : : : Updated gaim client fixes vulnerabilities

Updated gaim packages that fix a number of vulnerabilities are now available for Red Hat Linux on IBM iSeries and pSeries systems. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prior to...

DSA-326 orville-write - buffer overflows

Bulletin has no description...

PT-2003-1619 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.12 and earlier Description: The issue is related to a problem in the DCERPC DCE/RPC dissector, allowing remote attackers to cause a denial of service by consuming memory via a certain NDR string. Recommendations: For...

DSA-316 nethack - buffer overflow, incorrect permissions

Bulletin has no description...

PT-2003-1047 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 3.6.1 and earlier Description: The issue allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address, when...

DSA-308 gzip - insecure temporary files

Bulletin has no description...

KLA10092 LPE vulnerability in Borland Interbase

A buffer overflow was found in Borland Interbase. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally at a point related to gdslockmgr via specially designed environment variables. Original advisories - Related products Borland-Interba...

DSA-282 glibc - integer overflow

Bulletin has no description...

Samba-TNG 0.3.1 Security Release (fwd)

---------- Forwarded message ---------- Date: Sat, 22 Mar 2003 21:03:11 +0100 CET From: Stephan Lauffer [email protected] To: [email protected] Subject: ANNOUNCE Samba-TNG 0.3.1 Security Release Samba-TNG-0.3.1 released ========================== Mar 22th 2003 Today the...

Moderate: Red Hat Security Advisory: file security update

Updated file packages are available to close a buffer overflow vulnerability. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS The file command is used to identify a particular file according to the type of data contained by the file. The file...

MIT Kerberos V5 KDC logging routines use unsafe format strings

Overview Early releases of the MIT Kerberos V5 KDC contain format string vulnerabilities that can be used by unauthenticated remote attackers to conduct denial of service attacks on KDC servers. Description Logging routines in some unspecified versions of the MIT Kerberos V5 Key Distribution Cent...

[SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 226-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 226-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 223-1] New geneweb packages fix information exposure

-------------------------------------------------------------------------- Debian Security Advisory DSA 223-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2003 http://www.debian.org/security/faq -...

DSA-217 typespeed - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 176-1] New gv packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 176-1 [email protected] http://www.debian.org/security/ Martin Schulze October 16th, 2002 http://www.debian.org/security/faq -...

MIT Kerberos V5 KDC vulnerable to denial-of-service via null pointer dereference

Overview A vulnerability exists in MIT Kerberos V5 Key Distribution Center that may allow attackers to crash multiple KDC servers within the same realm. Description The MIT Kerberos V5 Key Distribution Center KDC contains a vulnerability that allows certain protocol requests to crash the KDC by...

[SECURITY] [DSA 143-1] New krb5 packages fix integer overflow bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 143-1 [email protected] http://www.debian.org/security/ Martin Schulze August 5th, 2002 - -------------------------------------------------------------------------- Package : krb5...

[SECURITY] [DSA-130-1] memory allocation error in ethereal

Package: ethereal Vulnerability: remotely triggered memory allocation error Debian-specific: no Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal...

Typsoft FTP Server: yet another directory traversal vulnerability

Method: simple directory traversal Risk: Medium Website: www.typsoft.com updated version available Hello All versions of TYPSoft FTP Server 0.97.1 and previous, but not tested are vulnerable to another directory traversal vulnerability than the one already published on BugTraq. A directory...