5183 matches found
Debian DSA-152-1 : l2tpd - missing random seed
Current versions of l2tpd, a layer 2 tunneling client/server program, forgot to initialize the random generator which made it vulnerable since all generated random number were 100% guessable. When dealing with the size of the value in an attribute value pair, too many bytes were able to be copied...
Debian DSA-331-1 : imagemagick - insecure temporary file
imagemagick's libmagick library, under certain circumstances, creates temporary files without taking appropriate security precautions. This vulnerability could be exploited by a local user to create or overwrite files with the privileges of another user who is invoking a program using this librar...
Debian DSA-141-1 : mpack - buffer overflow
Eckehard Berns discovered a buffer overflow in the munpack program which is used for decoding respectively binary files in MIME Multipurpose Internet Mail Extensions format mail messages. If munpack is run on an appropriately malformed email or news article then it will crash, and perhaps can be...
ADVISORY: http response splitting in snipsnap
ADVISORY Author: Maestro me! Date: 14-SEP-04 Vendor: SnipSnap www.snipsnap.org Product: SnipSnap 0.5.2a Product description from vendor website: SnipSnap is a free and easy to install weblog and wiki tool written in Java. Problem: Http response splitting web cache poisoning, xss, yadayadayada -...
Ipswitch IMail Server < 8.13.0 Multiple Vulnerabilities
Binary data 2257.prm...
Opera < 7.54 Empty Embedded Object DoS
The version of Opera installed on the remote host contains a flaw that allows an attacker to crash this browser remotely. To exploit this flaw, an attacker would need to craft a rogue website containing an embedded 'CCCC' object with an empty 'src' tag in it and would need to lure a victim to vis...
[SA12387] Gaucho "Content-Type:" Header Processing Buffer Overflow Vulnerability
TITLE: Gaucho "Content-Type:" Header Processing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12387 VERIFY ADVISORY: http://secunia.com/advisories/12387/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Gaucho 1.x http://secunia.com/product/3843/ DESCRIPTION: Ta...
Bugs fixed in Version 1.4.3
In-Reply-To: [email protected] B. Unspecified File Download Vulnerability B1. An error in the MyDMS software allows to a registered users and only to registered users to download any file, such as /etc/passwd, by inserting in a parameter a text such as...
phpGroupWare Unspecified Remote File Inclusion
The version of PhpGroupWare hosted on the remote web server has a vulnerability that may permit remote attackers, without prior authentication, to include and execute malicious PHP scripts. Remote users may influence URI variables to include a malicious PHP script on a remote system, it is possib...
CVSTrac Invalid Ticket DoS
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to invalid tickets that may allow an attacker to cause the application to crash. An attacker, exploiting this flaw, would be able to remotely shut down the...
CVSTrac history.c history_update Function Overflow
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the historyupdate function in history.c that may allow an attacker to cause a buffer overflow and execute arbitrary code on the remote system. Nessus has...
Mandrake Linux Security Advisory : gdm (MDKSA-2003:085)
Several vulnerabilities were discovered in versions of gdm prior to 2.4.1.6. The first vulnerability is that any user can read any text file on the system due to code originally written to be run as the user logging in was in fact being run as the root user. This code is what allows the examinati...
Mandrake Linux Security Advisory : bind (MDKSA-2002:038-1)
A vulnerability was discovered in the BIND9 DNS server in versions prior to 9.2.1. An error condition will trigger the shutdown of the server when the rdataset parameter to the dnsmessagefindtype function in message.c is not NULL as expected. This condition causes the server to assert an error...
Mandrake Linux Security Advisory : samba (MDKSA-2002:081)
A vulnerability in samba versions 2.2.2 through 2.2.6 was discovered by the Debian samba maintainers. A bug in the length checking for encrypted password change requests from clients could be exploited using a buffer overrun attack on the smbd stack. This attack would have to crafted in such a wa...
Fedora Core 2 : squirrelmail-1.4.3-1 (2004-160)
A SQL injection flaw was found in SquirrelMail version 1.4.2 and earlier. If SquirrelMail is configured to store user addressbooks in the database, a remote attacker could use this flaw to execute arbitrary SQL statements. The Common Vulnerabilities and Exposures project has assigned the name...
Fedora Core 2 : squid-2.5.STABLE5-4.fc2 (2004-164)
Mon Jun 07 2004 Jay Fenlason 7:2.5.STABLE3-4.fc2 - Backport security fix for ntlm auth helper CVE-2004-0541. - Thu Apr 08 2004 Jay Fenlason 7:2.5.STABLE5-3 - Fix the -pipe patch to have the correct name of the winbind pipe. Note that Tenable Network Security has extracted the preceding...
RHEL 3 : httpd (RHSA-2004:084)
Updated httpd packages are now available that fix a denial of service vulnerability in modssl and include various other bug fixes. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. A memory leak in modssl in the Apache HTTP Server prior to version...
[OpenPKG-SA-2004.026] OpenPKG Security Advisory (apache)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2004.026 27-May-2004 Package: apache option "withmodssl" only Vulnerability: arbitrar...
[Full-Disclosure] [SECURITY] [DSA 500-1] New flim packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 500-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 1st, 2004 http://www.debian.org/security/faq -...
Multiple Vulnerabilities in Samba
Background Samba is a package which allows UNIX systems to act as file servers for Windows computers. It also allows UNIX systems to mount shares exported by a Samba/CIFS/Windows server. smbmount is a program in the Samba package which allows normal users on a UNIX system to mount remote shares...