DSA-485 ssmtp - format string

Bulletin has no description...

Libxml2 URI parsing errors in nanohttp and nanoftp

Overview Libxml is the XML parser for Gnome, a desktop suite and development platform for Linux systems. Libxml2, the latest version of the library as of this writing, has a buffer overflow vulnerability which may allow execution of arbitrary code. Description Gnome, a desktop suite and developme...

Symlink Vulnerability in GNU automake <1.8.3

Vulnerable: GNU automake 1.8.3 Not Vulnerable: GNU automake 1.8.3 Project website: http://www.gnu.org/software/automake/ Description of libtool from website: "Automake is a tool for automatically generating Makefile.in' files compliant with the GNU Coding Standards." Discussion: The Makefiles...

[Full-Disclosure] Zone Labs Security Advisory ZL04-08 - SMTP processing vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Zone Labs Security Advisory ZL04-008 Zone Labs SMTP Processing Vulnerability Date Published February 18, 2004 Date Last Revised February 18, 2004 Severity Medium Overview ======== A security vulnerability exists in specific versions of ZoneAlarm,...

DSA-441 linux-kernel-2.4.17-mips+mipsel - missing function return value check

Bulletin has no description...

KLA10355 LPE vulnerability in Symantec

An unspecified vulnerability was found in Symantec products. By exploiting this vulnerability malicious users can gain system privileges. This vulnerability can be exploited locally via an unknown vector. Original advisories Symantec advisory Related products Symantec-Windows-LiveUpdate...

Symlink Vulnerability in GNU libtool <1.5.2

Vulnerable: libtool 1.5.2 Not Vulnerable: libtool 1.5.2 Project website: http://www.gnu.org/software/libtool/libtool.html Description of libtool from website: "GNU libtool is a generic library support script. Libtool hides the complexity of using shared libraries behind a consistent, portable...

KLA10130 ACE vulnerability in CuteFTP

A buffer overflow was found in CuteFTP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed server response. Original advisories - Related products CuteFTP-5-XP CVE list CVE-2003-1260 high...

HylaFAX: Remote code exploit in hylafax

Background HylaFAX is a popular client-server fax package. Description During a code review of the hfaxd server, the SuSE Security Team discovered a format bug condition that allows a remote attacker to execute arbitrary code as the root user. However, the bug cannot be triggered in the default...

PostgreSQL to_ascii() Function Remote Overflows

According to its version number, the PostgreSQL server listening on this port is vulnerable to two buffer overflows in the toascii function that could allow an attacker who can query the remote database to execute arbitrary code, subject to the privileges under which the service operates...

Opera < 7.21 HREF Escaped Character Overflow

The installed version of Opera on the remote host is vulnerable to a buffer overflow in the code that parses HREF tags in the server. To exploit them, an attacker would need to set up a rogue website, then lure a user of this host to visit the site using Opera. The attacker would then be able to...

iPlanet Web Server Enterprise Edition URL-encoded Host: Information Disclosure

According to its self reported version number, the remote iPlanet web server is affected by an information disclosure vulnerability wherein a remote user can retrieve sensitive data from memory allocation pools or cause a denial of service against the server. Since Nessus solely relied on the...

Critical: Red Hat Security Advisory: : Updated OpenSSH packages fix potential vulnerabilities

Updated OpenSSH packages are now available that fix bugs that may be remotely exploitable. Updated 17 Sep 2003 Updated packages are now available to fix additional buffer manipulation problems which were fixed in OpenSSH 3.7.1. The Common Vulnerabilities and Exposures project cve.mitre.org has...

[SECURITY] [DSA-381-1] New mysql packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 381-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 13th, 2003 http://www.debian.org/security/faq -...

Exim < 4.22 smtp_in.c HELO/EHLO Remote Overflow

According to its banner, the version of Exim running on the remote host has a remote heap-based buffer overflow vulnerability. A remote, unauthenticated attacker could potentially exploit this to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

DSA-345 xbl - buffer overflow

Bulletin has no description...

VP-ASP shopexd.asp catalogid Parameter SQL Injection

The remote host is using the VP-ASP software suite. This set of CGIs is vulnerable to a SQL injection bug which may allow an attacker to take the control of the server as an administrator. From there, he can obtain the list of customers, steal their credit card information and more. In addition t...

DSA-331 imagemagick - insecure temporary file

Bulletin has no description...

Yahoo! Audio Conferencing ActiveX control vulnerable to buffer overflow

Overview A remotely exploitable buffer overflow vulnerability has been discovered in the Yahoo! Audio Conferencing ActiveX control. Description The Yahoo! Audio Conferencing ActiveX control is used in the web-based Yahoo! Chat service, as well as in the Win32 Yahoo! Messenger application. There i...

Buffer overflow

Product: Opera Version: 7.10 and other ? OffSite: http://www.opera.com/ Problem: Buffer overflow ------------------------------------------ Opera - popular web-browser. Local and remote buffer overflow will take place if client open in browser this page: DIV...