SUSE-SA:2002:034: heimdal

The remote host is missing the patch for the advisory SUSE-SA:2002:034 heimdal. The Heimdal package is a free Kerberos implementation offering flexible authentication mechanisms based on the Kerberos 5 and Kerberos 4 scheme. The SUSE Security Team has reviewed critical parts of the Heimdal packag...

Fedora Core 1 : mc-4.6.0-14.10 (2004-112)

Several buffer overflows, several temporary file creation vulnerabilities, and one format string vulnerability have been discovered in Midnight Commander. These vulnerabilities were discovered mostly by Andrew V. Samoilov and Pavel Roskin. The Common Vulnerabilities and Exposures project...

Fedora Core 1 : lha-1.14i-12.1 (2004-119)

Ulf Harnhammar discovered two stack-based buffer overflows and two directory traversal flaws in LHA. An attacker could exploit the buffer overflows by creating a carefully crafted LHA archive in such a way that arbitrary code would be executed when the archive is tested or extracted by a victim...

Multiple bugs in Ethereal

DoS and buffer overflows on different protocols parsing...

FreeBSD : multiple buffer overflows in xboing (203)

The following package needs to be updated: xboing %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkge25566d56d3f11d883a4000a95bc6fae.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : ecartis buffer overflows and input validation bugs (38)

The following package needs to be updated: ecartis %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3e9be8c4819211d896450020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : metamail format string bugs and buffer overflows (108)

The following package needs to be updated: metamail %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga20082c3625511d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : kdelibs (RHSA-2002:221)

A number of vulnerabilities have been found that affect various versions of KDE. This errata provides updates for these issues. KDE is a graphical desktop environment for workstations. A number of vulnerabilities have been found in various versions of KDE. The SSL capability for Konqueror in KDE...

FreeBSD : Buffer overflows in XFree86 servers (206)

The following package needs to be updated: XFree86-Server %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3837f4625d6b11d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyrigh...

FreeBSD : Several remotely exploitable buffer overflows in gaim (52)

The following package needs to be updated: gaim %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg6fd024395d7011d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...

RHEL 3 : gaim (RHSA-2004:033)

Updated Gaim packages that fix a number of serious vulnerabilities are now available. Gaim is an instant messenger client that can handle multiple protocols. Stefan Esser audited the Gaim source code and found a number of bugs that have security implications. Due to the nature of instant messagin...

FreeBSD : lha buffer overflows and path traversal issues (90)

The following package needs to be updated: lha %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga2ffb6279c5311d893660020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006...

FreeBSD : Midnight Commander buffer overflows, format string bugs, and insecure temporary file handling (106)

The following package needs to be updated: mc %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg0c6f3fde9c5111d893660020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006...

FreeBSD : GNU Anubis buffer overflows and format string vulnerabilities (6)

The following package needs to be updated: anubis %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg8471bb856fb011d8873f0020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

ISC DHCP overflows

Hi, for those interested to reproduce the recent DOS attacks against ISC DHCPD 3.0.1 rc12 and rc13 as described in: http://www.kb.cert.org/vuls/id/317350 , i'm forwarding the first email i sent to ISC describing several stack based buffer overflows occuring during the creation of log messages and...

mit-krb5: Multiple buffer overflows in krb5_aname_to_localname

Background mit-krb5 is the free implementation of the Kerberos network authentication protocol by the Massachusetts Institute of Technology. Description The library function krb5anametolocalname contains multiple buffer overflows. This is only exploitable if explicit mapping or rules-based mappin...

multiple remote & local buffer overflows discovered in Drcatd

Zone-h Security Advisory Date of discovery : 24 june 2004 Date of release : 25 june 2004 Bug found by Khan Shirani [email protected] http://www.zone-h.org --------------------------------------- Software : Drcatd Bugs : Buffer Overflows , Remote and local multiple Risk : low Platform : nix...

Multiple drcatd bugs

Multiple buffer overflows...

[SECURITY] [DSA 520-1] New krb5 packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 520-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 16th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0544

The CVE-2004-0544 issue affects LVM on AIX 5.1/5.2, with multiple buffer overflows in putlvcb and getlvcb that enable local privilege escalation. Connected Nessus entries indicate vendor patches IY55681 (AIX 5.1) and IY55682 (AIX 5.2) to mitigate the vulnerability. Practically, systems running af...