2047 matches found
DSA-586-1 ruby - infinite loop
Bulletin has no description...
[SA13040] Caudium HTTP Request Processing Denial of Service
TITLE: Caudium HTTP Request Processing Denial of Service SECUNIA ADVISORY ID: SA13040 VERIFY ADVISORY: http://secunia.com/advisories/13040/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Caudium 1.x http://secunia.com/product/4196/ DESCRIPTION: A vulnerability has been...
DSA-574-1 cabextract - missing directory sanitising
Bulletin has no description...
Debian DSA-154-1 : fam - privilege escalation
A flawwas discovered in FAM's group handling. In the effect users are unable to read FAM directories they have group read and execute permissions on. However, also unprivileged users can potentially learn names of files that only users in root's group should be able to view. This problem been fix...
Debian DSA-210-1 : lynx - CRLF injection
lynx a text-only web browser did not properly check for illegal characters in all places, including processing of command line options, which could be used to insert extra HTTP headers in a request. For Debian GNU/Linux 2.2/potato this has been fixed in version 2.8.3-1.1 of the lynx package and...
Debian DSA-192-1 : html2ps - arbitrary code execution
The SuSE Security Team found a vulnerability in html2ps, an HTML to PostScript converter, that opened files based on unsanitized input insecurely. This problem can be exploited when html2ps is installed as filter within lprng and the attacker has previously gained access to the lp account. These...
Debian DSA-191-1 : squirrelmail - XSS
Several cross site scripting vulnerabilities have been found in squirrelmail, a feature-rich webmail package written in PHP4. The Common Vulnerabilities and Exposures CVE project identified the following vulnerabilities : - CAN-2002-1131: User input is not always sanitized so execution of arbitra...
Debian DSA-541-1 : icecast-server - missing escape
Markus Worle discovered a cross site scripting problem in status-display list.cgi of the icecast internal webserver, an MPEG layer III streaming server. The UserAgent variable is not properly htmlescaped so that an attacker could cause the client to execute arbitrary Java script commands...
Mandrake Linux Security Advisory : xchat (MDKSA-2002:006)
zen-parse discovered a problem in versions 1.4.2 and 1.4.3 of xchat that could allow a malicious user to send commands to the IRC server they are on which would take advantage of the CTCP PING reply handler in xchat. This could be used for denial of service, channel takeovers, and other similar...
DSA-485 ssmtp - format string
Bulletin has no description...
Buffer overflow in PicoPhone 1.63
Luigi Auriemma Application: Picophone http://www.vitez.it/picophone/ Versions: = 1.63 Platforms: Windows Bug: buffer overflow in the logging function Risk: high Exploitation: remote Date: 24 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...
[Full-Disclosure] [SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 419-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-373-1] New autorespond packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 373-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 16th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-324-1] New ethereal packages fix multiple vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 324-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 18th, 2003 http://www.debian.org/security/faq -...
DSA-315 gnocatan - buffer overflows, denial of service
Bulletin has no description...
iDEFENSE Security Advisory 2003-05-22.t
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 05.22.03: http://www.idefense.com/advisory/05.22.03.txt Authentication Bypass in iisPROTECT May 22, 2003 I. BACKGROUND iisPROTECT is designed to provide password protection to web directories similar to the htaccess method...
DSA-292 mime-support - insecure temporary file creation
Bulletin has no description...
[SECURITY] [DSA 247-1] New courier packages fix SQL injection
-------------------------------------------------------------------------- Debian Security Advisory DSA 247-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2003 http://www.debian.org/security/faq -...