DSA-344 unzip - directory traversal

Bulletin has no description...

MDKSA-2003:072 - Updated ypserv packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: ypserv Advisory ID: MDKSA-2003:072 Date: June 27th, 2003 Affected versions: 8.2, 9.0, Corporate Server 2.1 Problem Description: A vulnerability was found in versions of ypserv prior to version 2.7...

DSA-329 osh - buffer overflows

Bulletin has no description...

[SECURITY] [DSA-323-1] New noweb packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 323-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 16th, 2003 http://www.debian.org/security/faq -...

Trend Micro Emanager Detection

The Trend Micro Emanager software resides on this server. %NASLMINLEVEL 70300 This script was written by John [email protected] See the Nessus Scripts License for details Changes by Tenable: - Removed CVE and bid, changed description 09/24/19 include'deprecatednasllevel.inc';...

[SECURITY] [DSA-317-1] New cupsys packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 317-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 11th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 308-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 6th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 286-1] New gs-common packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 286-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...

DSA-281 moxftp - buffer overflow

Bulletin has no description...

DSA-265 bonsai - several vulnerabilities

Bulletin has no description...

Samba contains buffer overflow in SMB/CIFS packet fragment reassembly code

Overview A buffer overflow vulnerability has been discovered in Samba. An updated version has been released. Description A remotely exploitable buffer overflow vulnerability was discoved to affect Samba versions 2.0.x through 2.2.7a. From their bulletin: The SuSE security audit team, in particula...

Remote Exploit in Business::OnlinePayment::WorldPay::Junior

Business::OnlinePayment::WorldPay::Junior is a perl module providing a backend for perl scripts to manage credit/debit card payments through the WorldPay Select Junior service. I am the author of the module. There is a bug in all version of Business::OnlinePayment::WorldPay::Junior prior to 1.05...

DSA-262 samba - remote exploit

Bulletin has no description...

[SECURITY] [DSA 238-1] New kdepim packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 238-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23rd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 223-1] New geneweb packages fix information exposure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 223-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2003 http://www.debian.org/security/faq -...

DSA-220 squirrelmail - cross site scripting

Bulletin has no description...

[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 215-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23th, 2002 http://www.debian.org/security/faq -...

DSA-206 tcpdump - denial of service

Bulletin has no description...

[SECURITY] [DSA 202-2] New IM packages correct hidden architecture dependency

-------------------------------------------------------------------------- Debian Security Advisory DSA 202-2 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2002 http://www.debian.org/security/faq -...

SnortCenter 0.9.5 temp file naming problems...

Hello. I am releasing this very late, as SnortCenter v0.9.6 has been released for a few weeks now. This bug was discovered a couple of months ago, but not released at the request of Stefan Dens, the author of SnortCenter. SnortCenter is a php based tool for aggregating many snort sensors into one...