KDE Security Advisory: Secure Cookie Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: Secure Cookie Vulnerability Original Release Date: 2002-09-08 URL: http://www.kde.org/info/security/advisory-20020908-1.txt 0. References None. 1. Systems affected: Konqueror in KDE 3.0, KDE 3.0.1 and KDE 3.0.2. KDE 2.2.2 and KD...

[SECURITY] [DSA 164-1] New cacti package fixes arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 164-1 [email protected] http://www.debian.org/security/ Martin Schulze September 10th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 162-1] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 162-1 [email protected] http://www.debian.org/security/ Martin Schulze September 6th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 162-1] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 162-1 [email protected] http://www.debian.org/security/ Martin Schulze September 6th, 2002 http://www.debian.org/security/faq -...

DSA-162 ethereal - buffer overflow

Bulletin has no description...

Important: Red Hat Security Advisory: pxe security update

Updated PXE packages are now available for Red Hat Linux Advanced Server which fix a vulnerability that can crash the PXE server using certain DHCP packets. The PXE package contains the PXE Preboot eXecution Environment server and code needed for Linux to boot from a boot disk image on a Linux PX...

Samba enum_csc_policy Data Structure Termination Remote Overflow

The remote Samba server, according to its version number, is vulnerable to a possible buffer overflow because it fails to properly terminate the 'enumcscpolicy' struct. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exis...

[SECURITY] [DSA 159-1] New Python packages fix insecure temporary file use

-------------------------------------------------------------------------- Debian Security Advisory DSA 159-1 [email protected] http://www.debian.org/security/ Martin Schulze August 28th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 158-1] New gaim packages fix arbitrary program execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 158-1 [email protected] http://www.debian.org/security/ Martin Schulze August 27th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 158-1] New gaim packages fix arbitrary program execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 158-1 [email protected] http://www.debian.org/security/ Martin Schulze August 27th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 156-1] New Light package fixes arbitrary script execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 156-1 [email protected] http://www.debian.org/security/ Martin Schulze August 22th, 2002 http://www.debian.org/security/faq -...

eXtremail Multiple SMTP Command flog Function Format String

According to its version number, the remote eXtremail server has a format string vulnerability. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. Ref: http://online.securityfocus.com/archive/1/192791 Could not find a...

[Mantis Advisory/2002-03] Bug listings of private projects can be viewed through cookie manipulation

Mantis Advisory/2002-03 Bug listings of private projects can be viewed through cookie manipulation 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Detailed explanation 6. Contact details 1. Introduction Mantis is an Open Source...

DSA-154 fam - privilege escalation

Bulletin has no description...

[SECURITY] [DSA 153-1] New mantis package fixes cross site code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 14th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 145-1] New tinyproxy packages fix security vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 145-1 [email protected] http://www.debian.org/security/ Martin Schulze August 7th, 2002 - -------------------------------------------------------------------------- Package : tinyproxy...

[SECURITY] [DSA 140-1] New libpng packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 140-1 [email protected] http://www.debian.org/security/ Martin Schulze August 1st, 2002 - -------------------------------------------------------------------------- Package : libpng2, libpng3...

[SECURITY] [DSA 139-1] New super packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 139-1 [email protected] http://www.debian.org/security/ Martin Schulze August 1st, 2002 - -------------------------------------------------------------------------- Package : super...

KPMG-2002034: Jigsaw Webserver DOS device DoS

-------------------------------------------------------------------- Title: Jigsaw Webserver DOS device DoS BUG-ID: 2002034 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user can tie up working threads on the web server...

KPMG-2002033: Resin DOS device path disclosure

-------------------------------------------------------------------- Title: Resin DOS device path disclosure BUG-ID: 2002033 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== It is possible to disclose the physical path to the webroot...