[SECURITY] [DSA 1212-1] New openssh packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1212-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 15, 2006 - ------------------------------------------------------------------------ Package : openssh...

[SECURITY] [DSA 1211-1] New pdns packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1211-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 14th, 2006 http://www.debian.org/security/faq -...

Solaris 9 / 10 ld.so Local Root Exploit (1)

No description provided by source. / - SunOS 5.10 Generic i86pc i386 i86pc - SunOS 5.9 Generic112233-12 sun4u It does NOT work on: SunOS 5.8 Generic117350-02 sun4u sparc Example on unpatched Solaris 10 AMD64: atari:venglin: cat dupa.c / static char sh =...

[SECURITY] [DSA 1198-1] New python2.3 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1198-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 23rd, 2006 http://www.debian.org/security/faq -...

[USN-365-1] libksba vulnerability

=========================================================== Ubuntu Security Notice USN-365-1 October 16, 2006 libksba vulnerability CVE-2006-5111 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.04 This advisory also...

Debian DSA-1103-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3359 Franz Filz discovered that some socket...

GLSA-200609-05 : OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery

The remote host is affected by the vulnerability described in GLSA-200609-05 OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery Daniel Bleichenbacher discovered that it might be possible to forge signatures signed by RSA keys with the exponent of 3. Impact : Since several CAs are...

USN-342-1: PHP vulnerabilities

The sscanf function did not properly check array boundaries. In applications which use sscanf with argument swapping, a remote attacker could potentially exploit this to crash the affected web application or even execute arbitrary code with the application's privileges. CVE-2006-4020 The fileexis...

OpenSSL, AMD64 x86 emulation base libraries: RSA signature forgery

Background OpenSSL is a toolkit implementing the Secure Sockets Layer, Transport Layer Security protocols and a general-purpose cryptography library. The x86 emulation base libraries for AMD64 contain a vulnerable version of OpenSSL. Description Daniel Bleichenbacher discovered that it might be...

[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...

Linux Kernel多个安全漏洞

BUGTRAQ ID: 15049 CVECAN ID: CVE-2005-3053,CVE-2005-3106,CVE-2005-3107,CVE-2005-3108,CVE-2005-3109,CVE-2005-3110 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel中存在多个漏洞，具体如下： syssetmempolicy函数中存在拒绝服务漏洞。本地攻击者可以通过以负数的第一参数调用函数导致kernel崩溃。（CAN-2005-3053）...

win64 (URLDownloadToFileA) download and execute 218+ bytes

Exploit for win64 platform in category shellcode ========================================================== win64 URLDownloadToFileA download and execute 218+ bytes ========================================================== ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download &...

win64 URLDownloadToFileA download and execute 218+ bytes

win64 URLDownloadToFileA download and execute 218+ bytes. Shellcode exploit for win64 platform ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download & execute file using URLDownloadToFileA moniker & WinExec ; ; tested on AMD64 running Windows x64 SP1 ; ; there probably are errors ...

win64 (URLDownloadToFileA) download and execute 218+ bytes

No description provided by source. ; ; dexec64.asm - 218+ bytes unoptimised ; ; Win64 asm code, download & execute file using URLDownloadToFileA moniker & WinExec ; ; tested on AMD64 running Windows x64 SP1 ; ; there probably are errors in the code, but this is more of an experimental source if...

[SECURITY] [DSA 1142-1] New freeciv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1142-1 [email protected] http://www.debian.org/security/ Martin Schulze August 4th, 2006 http://www.debian.org/security/faq -...

libpng: Buffer overflow

Background libpng is an open, extensible image format library, with lossless compression. Description In pngrutil.c, the function pngdecompresschunk allocates insufficient space for an error message, potentially overwriting stack data, leading to a buffer overflow. Impact By enticing a user to lo...

DSA-1111 kernel-source-2.6.8 - race condition

Bulletin has no description...

CentOS 3 : kernel (CESA-2005:293)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CentOS 4 : kernel (CESA-2005:808)

Updated kernel packages that fix several security issues and a page attribute mapping bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...

CentOS 3 : kernel (CESA-2005:663)

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. This is the sixth regular update. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...