EPIC4 security fixes

New EPIC4 packages are available to fix security problems found by Timo Sirainen. EPIC4 is an IRC Internet Relay Chat client. Under certain circumstances, a malicious IRC server could cause EPIC4 to crash, or possibly to run arbitrary code as the user running EPIC4. All sites running EPIC4 are...

Important: Red Hat Security Advisory: : : : Updated MySQL packages fix vulnerabilities

Updated MySQL server packages for IBM iSeries and pSeries systems fix a number of security issues. MySQL is a multi-user, multi-threaded SQL database server. A double-free vulnerability in mysqld, for MySQL before version 3.23.55, allows attackers with MySQL access to cause a denial of service...

Apache 2.0.x < 2.0.46 on OS/2 filestat.c Device Name Request DoS

The remote host appears to be running a version of Apache 2.0.x that is prior to 2.0.46 on OS/2. There is a vulnerability specific to such versions running on OS/2 in 'filestat.c' that could allow an attacker to disable this service remotely. Note that Nessus solely relied on the version number o...

YaBB SE < 1.5.2 Multiple Vulnerabilities

The remote host is using the YaBB SE forum management system. According to its version number, this forum is vulnerable to a code injection bug that could allow an attacker with a valid account to execute arbitrary commands on this host by sending a malformed 'language' parameter in the web...

StockMan Shopping Cart shop.plx Path Disclosure

The remote host is running the StockMan shopping cart. There is a flaw in this version that could allow an attacker to obtain the physical path to the remote web root by requesting a non-exisant page through the 'shop.plx' CGI. An attacker may use this flaw to gain more knowledge about the setup...

DSA-297 snort - integer overflow, buffer overflow

Bulletin has no description...

Low: Red Hat Security Advisory: micq security update

Updated mICQ packages are available which fix a remote crash. mICQ is an online messaging and conferencing program. mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service crash via malformed ICQ message types without a 0xFE separator character. Users of mICQ are advised to...

DSA-294 gkrellm-newsticker - missing quoting, incomplete parser

Bulletin has no description...

KDE Security Advisory: PS/PDF file handling vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: PS/PDF file handling vulnerability Original Release Date: 2003-04-09 URL: http://www.kde.org/info/security/advisory-20030409-1.txt 0. References http://bugs.kde.org/showbug.cgi?id=53157 http://bugs.kde.org/showbug.cgi?id=53343...

DSA-283 xfsdump - insecure file creation

Bulletin has no description...

XMB < 1.9.1 Multiple XSS

The remote host is running XMB Forum, a web forum written in PHP. The version of XMB installed on the remote host is affected by several cross-site scripting issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

[SECURITY] [DSA 280-1] New samba packages fix remote root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 280-1 [email protected] http://www.debian.org/security/ Martin Schulze April 7th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 279-1] New metrics packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 279-1 [email protected] http://www.debian.org/security/ Martin Schulze April 7th, 2003 http://www.debian.org/security/faq -...

DSA-279 metrics - insecure temporary file creation

Paul Szabo and Matt Zimmerman discovered two similar problems in metrics, a tools for software metrics. Two scripts in this package, "halstead" and "gather\stats", open temporary files without taking appropriate security precautions. "halstead" is installed as a user program, while "gather\stats"...

ISC BIND < 4.9.5 DNS Resolver Functions Remote Overflow

The remote BIND server, according to its version number, is vulnerable to a remote buffer overflow within its resolver code. An attacker may be able to execute arbitrary code by having the remote DNS server make a request and send back a malicious DNS response with an invalid length field. C...

DSA-276 linux-kernel-s390 - local privilege escalation

Bulletin has no description...

[SECURITY] [DSA 275-1] New lpr-ppd packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 275-1 [email protected] http://www.debian.org/security/ Martin Schulze April 2nd, 2003 http://www.debian.org/security/faq -...

sendmail 8.12.9 available

-----BEGIN PGP SIGNED MESSAGE----- Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.9. It contains a fix for a critical security problem discovered by Michal Zalewski whom we thank for bringing this problem to our attention. Sendmail urges all users to either...

[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure

-------------------------------------------------------------------------- Debian Security Advisory DSA 269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2003 http://www.debian.org/security/faq -...

PostgreSQL < 7.2.3 Multiple Vulnerabilities

The remote PostgreSQL server, according to its version number, is vulnerable to various flaws which may allow an attacker who has the rights to query the remote database to obtain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...