D-Bus denial of service

Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...

DEBIAN-CVE-2006-5444

Integer overflow in the getinput function in the Skinny channel driver chanskinny.c in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads t...

security flaw

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in 1 the TIFFFetchAnyArray function in a tifdirread.c; 2 certain "codec cleanup methods" in b tiflzw.c, c tifpixarlog.c, and d tifzip.c; 3 and...

security flaw

Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...

DEBIAN-CVE-2006-1615

Multiple format string vulnerabilities in the logging code in Clam AntiVirus ClamAV before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized...

PYSEC-2006-1

Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors...

DEBIAN-CVE-2005-3256

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...

security flaw

Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...

security flaw

Multiple unknown vulnerabilities in the 1 WSP, 2 BER, 3 SMB, 4 NDPS, 5 IAX2, 6 RADIUS, 7 TCAP, 8 MRDISC, 9 802.3 Slow, 10 SMBMailslot, or 11 SMB PIPE dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service assert error...

security flaw

Multiple buffer overflows in the 1 SIP, 2 CMIP, 3 CMP, 4 CMS, 5 CRMF, 6 ESS, 7 OCSP, 8 X.509, 9 ISIS, 10 DISTCC, 11 FCELS, 12 Q.931, 13 NCP, 14 TCAP, 15 ISUP, 16 MEGACO, 17 PKIX1Explitit, 18 PKIXQualified, 19 Presentation dissectors in Ethereal before 0.10.11 allow remote attackers to cause a...

CVE-2004-1180

Unknown vulnerability in the rwho daemon rwhod before 0.17, on little endian architectures, allows remote attackers to cause a denial of service application crash...

CVE-2004-2744

Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "security update release."...

CVE-2004-2268

PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.php...

security flaw

The Internet Printing Protocol IPP implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service service hang via a certain UDP packet to the IPP port...

DEBIAN-CVE-2003-0832

Directory traversal vulnerability in webfs before 1.20 allows remote attackers to read arbitrary files via .. dot dot sequences in a Hostname header...

DEBIAN-CVE-2003-0723

Buffer overflow in gkrellmd for gkrellm 2.1.x before 2.1.14 may allow remote attackers to execute arbitrary code...

CVE-2001-0897

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB before 5.47e allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field...