DSA-997-1 bomberclone - buffer overflows

Bulletin has no description...

RHEL 2.1 / 3 / 4 : ethereal (RHSA-2006:0156)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Two denial of service bugs were found in Ethereal's IRC...

DSA-935-1 libapache2-mod-auth-pgsql - format string vulnerability

Bulletin has no description...

Fedora Core 3 : lm_sensors-2.8.7-2.FC3.1 (2005-1054)

The lmsensors package includes a collection of modules for general SMBus access and hardware monitoring. NOTE: this package requires special support which is not in standard 2.2-vintage kernels. A bug was found in the pwmconfig tool which uses temporary files in an insecure manner. The pwconfig...

DSA-825-1 loop-aes-utils - privilege escalation

Bulletin has no description...

DSA-813-1 centericq - several

Bulletin has no description...

DSA-740-1 zlib - buffer overflow

Bulletin has no description...

DSA-739-1 trac - missing input sanitising

Bulletin has no description...

[USN-91-1] EXIF library vulnerability

=========================================================== Ubuntu Security Notice USN-91-1 March 07, 2005 libexif vulnerabilities https://bugzilla.ubuntulinux.org/7152 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10...

Debian DSA-689-1 : libapache-mod-python - missing input sanitizing

Graham Dumpleton discovered a flaw which can affect anyone using the publisher handle of the Apache Software Foundation's modpython. The publisher handle lets you publish objects inside modules to make them callable via URL. The flaw allows a carefully crafted URL to obtain extra information that...

Moderate: Red Hat Security Advisory: mod_python security update

An updated modpython package that fixes a security issue in the publisher handle is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Modpython is a module that embeds the Python language interpreter...

DSA-678-1 netkit-rwho - missing input validation

Bulletin has no description...

Moderate: Red Hat Security Advisory: mod_python security update

An Updated modpython package that fixes a security issue in the publisher handler is now available. Modpython is a module that embeds the Python language interpreter within the Apache web server, allowing handlers to be written in Python. Graham Dumpleton discovered a flaw affecting the publisher...

[SECURITY] [DSA 654-1] New enscript packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 654-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...

Debian DSA-631-1 : kdelibs - unsanitised input

Thiago Macieira discovered a vulnerability in the kioslave library, which is part of kdelibs, which allows a remote attacker to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline before the FTP command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-471-1 : interchange - missing input sanitising

A vulnerability was discovered recently in Interchange, an e-commerce and general HTTP database display system. This vulnerability can be exploited by an attacker to expose the content of arbitrary variables. An attacker may learn SQL access information for your Interchange application and use th...

Debian DSA-507-1 : cadaver - buffer overflow

Stefan Esser discovered a problem in neon, an HTTP and WebDAV client library, which is also present in cadaver, a command-line client for WebDAV server. User input is copied into variables not large enough for all cases. This can lead to an overflow of a static heap variable. %NASLMINLEVEL 70300 ...

Debian DSA-287-1 : epic - buffer overflows

Timo Sirainen discovered several problems in EPIC, a popular client for Internet Relay Chat IRC. A malicious server could craft special reply strings, triggering the client to write beyond buffer boundaries. This could lead to a denial of service if the client only crashes, but may also lead to...

Debian DSA-129-1 : uucp - remote denial of service

We have received reports that in.uucpd, an authentication agent in the uucp package, does not properly terminate certain long input strings. This has been corrected in uucp package version 1.06.1-11potato3 for Debian 2.2 potato and in version 1.06.1-18 for the upcoming woody release. %NASLMINLEVE...

Debian DSA-035-1 : man2html - remote denial of service

It has been reported that one can tweak man2html remotely into consuming all available memory. This has been fixed by Nicolas Lichtmaier with help of Stephan Kulow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debi...