[SECURITY] [DLA 389-1] giflib security update

Package : giflib Version : 4.1.6-9+deb6u1 CVE ID : CVE-2015-7555 Debian Bug : 808704 It was discovered that a maliciously crafted GIF can crash the giffix utility which is part of giflib-tools. We recommend that you upgrade your giflib-tools package to version 4.1.6-9+deb6u1 Debian squeeze LTS...

MGASA-2016-0020 Updated giflib packages fix security vulnerability

A heap-based buffer overflow vulnerability was found in giffix utility of giflib when processing records of the type 'IMAGEDESCRECORDTYPE' due to the allocated size of 'LineBuffer' equaling the value of the logical screen width, 'GifFileIn-SWidth', while subsequently having 'GifFileIn-Image.Width...

Updated giflib packages fix security vulnerability

A heap-based buffer overflow vulnerability was found in giffix utility of giflib when processing records of the type 'IMAGEDESCRECORDTYPE' due to the allocated size of 'LineBuffer' equaling the value of the logical screen width, 'GifFileIn-SWidth', while subsequently having 'GifFileIn-Image.Width...

DLA-389-1 giflib - security update

Bulletin has no description...

CVE-2016-1569

FireBird 2.5.5 allows remote authenticated users to cause a denial of service daemon crash by using service manager to invoke the gbak utility with an invalid parameter...

Design/Logic Flaw

FireBird 2.5.5 allows remote authenticated users to cause a denial of service daemon crash by using service manager to invoke the gbak utility with an invalid parameter...

CVE-2016-1569

FireBird 2.5.5 allows remote authenticated users to cause a denial of service daemon crash by using service manager to invoke the gbak utility with an invalid parameter...

CVE-2016-1569

CVE-2016-1569 affects Firebird 2.5.5. Remote authenticated users can trigger a denial of service (daemon crash) by using the service manager to invoke the gbak utility with an invalid parameter. The issue is linked to gbak command handling, enabling DoS when a specially crafted gbak invocation is...

Apple OS X Directory Utility Privilege Gain Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in the Directory Utility in Apple OS X 10.11.0 and earlier versions, which arises from the program failing to properly handle authentication for new sessions. A local attacker could...

KLA10741 Denial of service vulnerability in FireBird

Improper commands usage at RDBMS was found in FireBird. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via vectors related to gbak utility. Technical details This vulnerability related to unhandled case exception at...

CVE-2015-6980

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...

CVE-2015-6980

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...

CVE-2015-6980

CVE-2015-6980 affects Apple OS X Directory Utility. OS X 10.11.0 and earlier mishandle authentication for new sessions, enabling local privilege escalation by a local attacker. Affected: Directory Utility in OS X before 10.11.1 (per CNVD entry and NVD description). Mitigation: upgrade to OS X 10....

TCP Profiles on NetScaler

TCP configurations for a NetScaler appliance can be specified in an entity called a TCP profile, which is a collection of TCP settings. The TCP profile can then be associated with services or virtual servers that want to use these TCP configurations. Built-in TCP Profiles For convenience of...

CVE-2015-6980: Undefined Security Weakness

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors...

Konica Minolta FTP Utility 1.00 - CWD Command Overflow (SEH)

Title: Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow. Date : 01/08/2016 Author: TOMIWA. Software link: http://download.konicaminolta.hk/bt/driver/mfpu/ftpu/ftpu10.zip Software: Konica Minolta FTP Utility v1.0 Tested: Windows 7 SP1 64bits Listen for a reverse netcat connection...

IBM Installation Manager and Packaging Utility Elevation of Privilege Vulnerability

IBM Installation Manager and Packaging Utility are both products of IBM America. The former is a set of general software management tools that can run on a variety of platforms such as IBM i, OS, Windows, Linux, Unix, and the latter is a set of free repository and package management tools. A...

CVE-2015-7442

consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value...

Code injection

consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value...

CVE-2015-7442

consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value...