DSA-592-1 ez-ipupdate - format string

Bulletin has no description...

Re: debian dhcpd, old format string bug

[email protected] wrote: On Thu, 28 Oct 2004 10:31:38 +1000 Tarragon Allen [email protected] wrote: On Tuesday 26 October 2004 10:37, [email protected] wrote: Firstly, good etiquette would have been for you to actually report the bug with Debian. I don't see any bugs raised agains...

PostgreSQL make_oidjoins_check Arbitrary File Overwrite

The remote PostgreSQL server, according to its version number, is vulnerable to an unspecified insecure temporary file creation flaw, which may allow a local attacker to overwrite arbitrary files with the privileges of the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian DSA-136-1 : openssl - multiple remote exploits

The OpenSSL development team has announced that a security audit by A.L. Digital Ltd and The Bunker, under the DARPA CHATS program, has revealed remotely exploitable buffer overflow conditions in the OpenSSL code. Additionally, the ASN1 parser in OpenSSL has a potential DoS attack independently...

Fedora Core 1 : gtk2-2.2.4-10 (2004-288)

During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the BMP image processor of gtk2. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by a...

Important: Red Hat Security Advisory: qt security update

Updated qt packages that fix security issues in several of the image decoders are now available. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. During a security audit, Chris Evans discovered a heap...

Linux User Account Activity Add User to Group (via Splunk): audit (USER_CHAUTHTOK)

Binary data 710029.prm...

Linux User Account Activity Delete User (via Splunk): audit (DEL_USER, plain)

Binary data 710033.prm...

Linux User Account Activity Add User to Group (via Splunk): audit (USER_MGMT)

Binary data 710013.prm...

Linux User Account Activity Remove User from Group (via Splunk): audit (USER_ACCT)

Binary data 710030.prm...

Linux User Account Activity Create User (via Splunk): audit (USER_MGMT)

Binary data 710045.prm...

Linux User Account Activity Delete User (via Splunk): audit (DEL_USER, not found)

Binary data 710034.prm...

Linux User Account Activity Change Password (via Splunk): audit (changing password)

Binary data 710031.prm...

Linux User Account Activity Create User (via Splunk): audit (ADD_USER)

Binary data 710037.prm...

Linux User Account Activity Delete User (via Splunk): audit (DEL_USER, deleting user entries)

Binary data 710039.prm...

Linux Service Modification Service Start (via Splunk): audit (SERVICE_START)

Binary data 710020.prm...

Mandrake Linux Security Advisory : xinetd (MDKSA-2001:076)

An audit has been performed on the xinetd 2.3.0 source code by Solar Designer for many different possible vulnerabilities. The 2.3.1 release incorporated his patches into the xinetd source tree. The audit was very thorough and found and fixed many problems. This xinetd update includes his audit...

Fedora Core 1 : cvs-1.11.17-1 (2004-169)

While investigating a previously fixed vulnerability, Derek Price discovered a flaw relating to malformed 'Entry' lines which lead to a missing NULL terminator. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0414 to this issue. Stefan Esser and...

Fedora Core 2 : cvs-1.11.17-2 (2004-170)

While investigating a previously fixed vulnerability, Derek Price discovered a flaw relating to malformed 'Entry' lines which lead to a missing NULL terminator. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0414 to this issue. Stefan Esser and...

Potential Buffer Overrun in smbd

Description A buffer overrun has been located in the code used to support the 'mangling method = hash' smb.conf option. Please be aware that the default setting for this parameter is 'mangling method = hash2' and therefore not vulnerable. Affected Samba 3 installations can avoid this possible...