[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...

[SECURITY] [DSA 1274-1] New file packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1274-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 02, 2007 - ------------------------------------------------------------------------ Package : file Vulnerability :...

[USN-430-1] mod_python vulnerability

=========================================================== Ubuntu Security Notice USN-430-1 March 06, 2007 libapache2-mod-python vulnerability CVE-2004-2680 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 Ubuntu 6.06...

GLSA-200703-06 : AMD64 x86 emulation Qt library: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200703-06 AMD64 x86 emulation Qt library: Integer overflow An integer overflow flaw has been found in the pixmap handling of Qt, making the AMD64 x86 emulation Qt library vulnerable as well. Impact : By enticing a user to open a...

AMD64 x86 emulation Qt library: Integer overflow

Background The AMD64 x86 emulation Qt library for AMD64 emulates the x86 32-bit Qt library on the AMD64 64-bit architecture. Description An integer overflow flaw has been found in the pixmap handling of Qt, making the AMD64 x86 emulation Qt library vulnerable as well. Impact By enticing a user to...

GLSA-200702-08 : AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200702-08 AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities Chris Evans has discovered multiple buffer overflows in Sun JDK and Sun JRE possibly related to various AWT or font layout functions. Tom Hawtin ha...

[SECURITY] [DSA 1248-1] New libsoup packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1248-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 12nd, 2007 http://www.debian.org/security/faq -...

[USN-403-1] X.org vulnerabilities

=========================================================== Ubuntu Security Notice USN-403-1 January 09, 2007 xorg, xorg-server vulnerabilities CVE-2006-6101, CVE-2006-6102, CVE-2006-6103 =========================================================== A security issue affects the following Ubuntu...

[SECURITY] [DSA 1247-1] New libapache-mod-auth-kerb packages fix remote denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1247-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 08, 2007 - ------------------------------------------------------------------------ Package :...

GLSA-200612-11 : AMD64 x86 emulation base libraries: OpenSSL multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200612-11 AMD64 x86 emulation base libraries: OpenSSL multiple vulnerabilities Tavis Ormandy and Will Drewry, both of the Google Security Team, discovered that the SSLgetsharedciphers function contains a buffer overflow...

AMD64 x86 emulation base libraries: OpenSSL multiple vulnerabilities

Background OpenSSL is a toolkit implementing the Secure Sockets Layer, Transport Layer Security protocols and a general-purpose cryptography library. The x86 emulation base libraries for AMD64 contain a vulnerable version of OpenSSL. Description Tavis Ormandy and Will Drewry, both of the Google...

GNU BinUtils GAS缓冲区溢出漏洞

GNU BinUtils GAS是GNU的汇编器。 GNU BinUtils GAS存在缓冲区溢出，本地攻击者可以利用漏洞以用户进程权限执行任意指令。 通过诱使用户或自动系统使用gcc或gas构建恶意源文件，可导致触发漏洞，可能以用户进程权限执行任意指令。 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu...

KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞

JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题，本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...

Debian DSA-1222-2 : proftpd - several vulnerabilities

Due to technical problems yesterday's proftpd update lacked a build for the amd64 architecture, which is now available. For reference please find below the original advisory text : Several remote vulnerabilities have been discovered in the proftpd FTP daemon, which may lead to the execution of...

[SECURITY] [DSA 1226-1] New links packages fix arbitrary shell command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1226-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 3rd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite

------------------------------------------------------------------------ Debian Security Advisory DSA-1223-1 [email protected] http://www.debian.org/security/ Noah Meyerhans December 01, 2006 - ------------------------------------------------------------------------ Package : tar Vulnerability...

[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite

------------------------------------------------------------------------ Debian Security Advisory DSA-1223-1 [email protected] http://www.debian.org/security/ Noah Meyerhans December 01, 2006 - ------------------------------------------------------------------------ Package : tar Vulnerability...

Perl格式串处理整数溢出漏洞

BUGTRAQ ID: 15629 CVECAN ID: CVE-2005-3962,CVE-2005-3912 Perl是一种免费且功能强大的编程语言。 由于Perl没有正确的处理格式化打印函数中的格式指示符导致了格式串溢出漏洞，远程攻击者可能利用此漏洞在主机上执行任意指令。 参数格式串（%I$n）中的INTMAX值可能导致Perlsvvcatpvfn函数中的efix出现整数溢出。攻击者可以利用这个漏洞远程执行任意指令或导致拒绝服务。 Larry Wall Perl http://www.debian.org/security/2005/dsa-943 补丁下载： Source...

DSA-1222-1 proftpd

Bulletin has no description...

PSToText文件名处理shell命令执行漏洞

PSToText是一款从PostScript 和PDF档案中提取出文字的程序。 PSToText不正确处理文件名数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意shell命令。 攻击者需要构建恶意文件名，诱使用户处理来触发，目前没有详细漏洞细节提供。 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Lin...