[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite

------------------------------------------------------------------------ Debian Security Advisory DSA-1223-1 [email protected] http://www.debian.org/security/ Noah Meyerhans December 01, 2006 - ------------------------------------------------------------------------ Package : tar Vulnerability...

Arbitrary Code Execution

Overview Affected versions of this package are vulnerable to Arbitrary Code Execution. GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPENAMES record with a symbolic link, which is not properly...

GNU Tar 1.1x - GNUTYPE_NAMES Directory Traversal

GNU Tar 1.1x - GNUTYPENAMES Directory Traversal / source: https://www.securityfocus.com/bid/21235/info GNU Tar is prone to a vulnerability that may allow an attacker to place files and overwrite files in arbitrary locations on a vulnerable computer. These issues present themselves when the...

[SECURITY] [DSA 1212-1] New openssh packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1212-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 15, 2006 - ------------------------------------------------------------------------ Package : openssh...

AVG Antivirus multiple security vulnerabilities

Heap overflow on CAB and RAR archives parsing, integer overflow on EXE parsing...

MailMarshal directory traversal

Directory traversal on ARJ archives parsing...

CVE-2006-5680

The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop tha...

libarchive -- Infinite loop in corrupt archives handling in libarchive

Problem Description: If the end of an archive is reached while attempting to "skip" past a region of an archive, libarchive will enter an infinite loop wherein it repeatedly attempts and fails to read further data. Impact: An attacker able to cause a system to extract via "tar -x" or another...

[SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1204-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 2nd, 2006 http://www.debian.org/security/faq -...

Clam Anti-Virus CHM解包器拒绝服务漏洞

Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV在处理CHM文件的解包时存在安全漏洞，远程攻击者可能利用此漏洞导致ClamAV崩溃。 在处理畸形文件时，ClamAV chmunpack.c中的代码可能试图读取无效的内存位置，导致扫描服务异常终止。 ClamAV ClamAV 0.88.4 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1196-1）以及相应补丁: DSA-1196-1：New clamav packages fix arbitrary code execution...

Debian DSA-1170-1 : gcc-3.4 - missing sanity check

Jurgen Weigert discovered that upon unpacking JAR archives fastjar from the GNU Compiler Collection does not check the path for included files and allows to create or overwrite files in upper directories. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Debian DSA-959-1 : unalz - buffer overflow

Ulf Harnhammar from the Debian Security Audit Project discovered that unalz, a decompressor for ALZ archives, performs insufficient bounds checking when parsing file names. This can lead to arbitrary code execution if an attacker provides a crafted ALZ archive. %NASLMINLEVEL 70300 C Tenable Netwo...

Alvila Avast! antivirus buffer overflow

Buffer overflow on LHA archives parsing...

[SECURITY] [DSA 1170-1] New fastjar packages fix directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 1170-1 [email protected] http://www.debian.org/security/ Martin Schulze September 6th, 2006 http://www.debian.org/security/faq -...

DSA-1170 gcc-3.4 - missing sanity check

Bulletin has no description...

Compression Plus library buffer overflow

Buffer overflow on Zoo archives parsing...

OZJournal15.txt

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

BlogCMS.txt

Blog:Cms = 4.1.0 Remote Inclusion File Bug Found by Drago84 ToxiC CreW Site Vendor :http://blogcms.com/ Page affetc: index.php media.php archive.php archives.php blog.php The Problem is: include$DIRPLUGINS."related/nusoap.php"; Expl:...

LHAZ archiver buffer overflow

Buffer overflow on oversized filename during JZH archives parsing...

CVE-2005-2529

Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."...