DEBIAN-CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

CVE-2009-2800

Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via a crafted alias file...

Buffer overflow

Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via a crafted alias file...

CVE-2009-2800

CVE-2009-2800 : Affected product/versions — Apple Mac OS X 10.4.11 and 10.5.8. The vulnerability is a buffer overflow in Alias Manager when processing crafted alias files. This can allow an attacker to achieve arbitrary code execution or cause a denial of service (application crash) . The issue i...

CVE-2009-2800

Buffer overflow in Alias Manager in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via a crafted alias file...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

[Full-disclosure] [SECURITY] [DSA 1833-1] New dhcp3 packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1833-1 [email protected] http://www.debian.org/security/ Florian Weimer July 14, 2009 http://www.debian.org/security/faq -...

RedHat Security Advisory RHSA-2009:1066

The remote host is missing updates announced in advisory RHSA-2009:1066. A server-side code injection flaw was found in the SquirrelMail mapypalias function. If SquirrelMail was configured to retrieve a user's IMAP server address from a Network Information Service NIS server via the mapypalias...

DBD::Pg 'pg_getline()'和'getline()'堆缓冲区溢出漏洞

BUGTRAQ ID: 34755 CVE ID：CVE-2009-0663 DBD::Pg是一款用于PostgreSQL数据库访问的DBI驱动模块。 DBD::Pg存在基于堆的缓冲区溢出，远程攻击者可以利用漏洞执行任意代码。 使用pggetline和getline函数可从数据库中读取行信息的应用程序可通过触发堆溢出而执行任意代码。 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux...

[SECURITY] [DSA 1773-1] New cups packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1773-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 17, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1745-1] New lcms packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1745-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1741-1] New psi packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1741-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 14, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1719-2] New GNUTLS packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1719-2 [email protected] http://www.debian.org/security/ Florian Weimer February 28, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1678-1] New perl packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1678-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 03, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1608-1] New mysql-dfsg-5.0 packages fix authorization bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-1608-1 [email protected] http://www.debian.org/security/ Devin Carraway July 13, 2008 http://www.debian.org/security/faq -...

Memory corruption

Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service memory corruption and application crash by resolving an alias that contains crafted AFP volume mount information...

CVE-2008-2308

Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service memory corruption and application crash by resolving an alias that contains crafted AFP volume mount information...

CVE-2008-2308

CVE-2008-2308 affects Apple Mac OS X 10.5.1 and earlier on Intel, via the Alias Manager when resolving an AFP volume mount information. The vulnerability enables local users to gain privileges or cause a denial of service (memory corruption and application crash). Public sources in the connected ...

CVE-2008-2308

Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users to gain privileges or cause a denial of service memory corruption and application crash by resolving an alias that contains crafted AFP volume mount information...

Ruby vulnerability caused by a problem with the alias funtion so that safe level 4 does not function as a sandbox

Overview Safe levels exist as a part of the Ruby language security model, in order to limit the operation of untrusted objects. Ruby contains a vulnerability which may allow an attacker to bypass the safe level restrictions and execute normally inaccessible methods, due to a problem in Ruby's ali...