Pine MUA contains buffer overflow in addr_list_string()

Overview Pine is a mail user agent MUA written and distributed by the University of Washington. Some versions contain a buffer overflow vulnerability in email address handling. Description Versions of Pine prior to 4.50 contain a remotely exploitable buffer overflow in the addrliststring function...

[SECURITY] [DSA 202-2] New IM packages correct hidden architecture dependency

-------------------------------------------------------------------------- Debian Security Advisory DSA 202-2 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 192-2] New html2ps packages correct fix against arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 192-2 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2002 ://www.debian.org/security/faq -...

[SECURITY] [DSA 192-2] New html2ps packages correct fix against arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 192-2 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2002 ://www.debian.org/security/faq -...

DSA-203 smb2www - arbitrary command execution

Bulletin has no description...

Cyrus IMAP Server contains a buffer overflow vulnerability

Overview A buffer overflow vulnerability exists in versions of Cyrus IMAP Server up to and including 2.1.10. This vulnerability may allow a remote attacker to execute arbitrary code on the mail server with the privileges of the Cyrus IMAP Server. Description Cyrus IMAP Server is an e-mail...

Null httpd Content-Length Header Handling Remote Overflow

The NullLogic Null HTTPd web server crashed when sent an invalid POST HTTP request with a negative Content-Length field. An attacker may exploit this flaw to disable your service or even execute arbitrary code on your system. C Tenable Network Security, Inc. References: Date: Sun, 22 Sep 2002...

[SECURITY] [DSA-200-1] Samba buffer overflow

Package : samba Problem type : remote exploit Debian-specific: no Steve Langasek found an exploitable bug in the password handling code in samba: when converting from DOS code-page to little endian UCS2 unicode a buffer length was not checked and a buffer could be overflowed. There is no known...

[SECURITY] [DSA 199-1] New mhonarc packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 199-1 [email protected] http://www.debian.org/security/ Martin Schulze November 19th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 198-1] New nullmailer packages fix local denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 198-1 [email protected] http://www.debian.org/security/ Martin Schulze November 18th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 198-1] New nullmailer packages fix local denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 198-1 [email protected] http://www.debian.org/security/ Martin Schulze November 18th, 2002 http://www.debian.org/security/faq -...

LiteServe HTTP Service Malformed URL Decoding Remote DoS

The remote web server does not respond after it receives a URL consisting of a long string of '%' characters. Note that if the web server is protected with some sort of Intrusion Prevention Systems IPS, this may be a false-positive. C Tenable Network Security, Inc. Affected: Webseal 3.8 unconfirm...

DSA-198 nullmailer - denial of service

Bulletin has no description...

[SECURITY] [DSA 197-1] New sqwebmail packages fix local information exposure

-------------------------------------------------------------------------- Debian Security Advisory DSA 197-1 [email protected] http://www.debian.org/security/ Martin Schulze November 15th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 197-1] New sqwebmail packages fix local information exposure

-------------------------------------------------------------------------- Debian Security Advisory DSA 197-1 [email protected] http://www.debian.org/security/ Martin Schulze November 15th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 194-1] New masqmail packages fix buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 194-1 [email protected] http://www.debian.org/security/ Martin Schulze November 12th, 2002 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: tomcat security update for Stronghold

Updated tomcat packages are now available for Stronghold Cross Platform to close a JSP source code exposure vulnerability. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. A source code exposure...

[SECURITY] [DSA 189-1] New luxman packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 189-1 [email protected] http://www.debian.org/security/ Martin Schulze November 6th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 184-1] New krb4 packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 184-1 [email protected] http://www.debian.org/security/ Martin Schulze October 30th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 184-1] New krb4 packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 184-1 [email protected] http://www.debian.org/security/ Martin Schulze October 30th, 2002 http://www.debian.org/security/faq -...