GNUMP3d: Directory traversal and XSS vulnerabilities

Background GNUMP3d is a streaming server for MP3s, OGG vorbis files, movies and other media formats. Description Steve Kemp reported about two cross-site scripting attacks that are related to the handling of files CVE-2005-3424, CVE-2005-3425. Also reported is a directory traversal vulnerability...

RHEL 2.1 : grip (RHSA-2005:304)

A new grip package is available that fixes a remote buffer overflow. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Grip is a GTK+ based front-end for CD rippers such as cdparanoia and cdda2wav and Ogg Vorbis encoders. Dean Brettle discovered ...