[SECURITY] [DSA 3155-1] postgresql-9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3155-1 [email protected] http://www.debian.org/security/ Luciano Bello February 06, 2015 http://www.debian.org/security/faq -...

DSA-3155-1 postgresql-9.1 - security update

Bulletin has no description...

Debian Security Advisory DSA 3155-1 (postgresql-9.1 - security update)

Several vulnerabilities have been found in PostgreSQL-9.1, a SQL database system. CVE-2014-8161: Information leak A user with limited clearance on a table might have access to information in columns without SELECT rights on through server error messages. CVE-2015-0241: Out of boundaries read/writ...

Vulnerability in core server (CVE-2015-0241)

Buffer overruns in "tochar" functions...

FreeBSD : file -- buffer overruns and missing buffer size tests (84203724-296b-11e4-bebd-000c2980a9f3)

Christos Zoulas reports : A specially crafted file can cause a segmentation fault. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors...

Ipswitch WS_FTP Server 3.4/4.0 FTP Command Buffer Overrun Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/8542/info Ipswitch WSFTP Server is reported to be prone to buffer overruns when handling data supplied to the APPE and STAT FTP commands. An FTP user who supplies excessive input to these commands could potentially execut...

ViRobot Linux Server 2.0 - Local Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/8462/info Various potential security vulnerabilities have been reported for ViRobot Linux Server. Problems are said to occur within various setuid binaries installed by the program. Reports indicate that some of these...

argosoft ftp server 1.0/1.2/1.4 - Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP SITE ZIP and SITE COPY...

file -- buffer overruns and missing buffer size tests

Christos Zoulas reports: A specially crafted file can cause a segmentation fault...

Vulnerability in core server (CVE-2014-0065)

Potential buffer overruns of fixed-size buffers...

Vulnerability in core server (CVE-2014-0063)

Potential buffer overruns in datetime input/output...

Vulnerability in core server (CVE-2014-0064)

Potential buffer overruns due to integer overflow in size calculations...

PostgreSQL 8.4.x < 8.4.20 / 9.0.x < 9.0.16 / 9.1.x < 9.1.12 / 9.2.x < 9.2.7 / 9.3.x < 9.3.3 Multiple Vulnerabilities

Binary data 8133.prm...

PostgreSQL 8.4 < 8.4.20 / 9.0 < 9.0.16 / 9.1 < 9.1.12 / 9.2 < 9.2.7 / 9.3 < 9.3.3 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 8.4.x prior to 8.4.20, 9.0.x prior to 9.0.16, 9.1.x prior to 9.1.12, 9.2.x prior to 9.2.7 or 9.3.x prior to 9.3.3. It is, therefore, potentially affected by multiple vulnerabilities : - SET ROLE bypasses lack of ADMIN OPTION when granting...

Debian Security Advisory DSA 2865-1 (postgresql-9.1 - several vulnerabilities)

Various vulnerabilities were discovered in PostgreSQL: CVE-2014-0060 Shore up GRANT ... WITH ADMIN OPTION restrictions Noah Misch Granting a role without ADMIN OPTION is supposed to prevent the grantee from adding or removing members from the granted role, but this restriction was easily bypassed...

FreeBSD : PuTTY -- Four security holes in versions before 0.63 (4b448a96-ff73-11e2-b28d-080027ef73ec)

Simon Tatham reports : This 0.63 release fixes multiple security holes in previous versions of PuTTY, which can allow an SSH-2 server to make PuTTY overrun or underrun buffers and crash. ... These vulnerabilities can be triggered before host key verification, which means that you are not even saf...

Oracle Linux 5 : kernel (ELSA-2009-1106)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1106 advisory. - nfs v4: client handling of MAYEXEC in nfspermission Peter Staubach 500301 500302 CVE-2009-1630 - fs cifs: fix pointer and checks in cifsfollowsymlink...

PuTTY -- Four security holes in versions before 0.63

Simon Tatham reports: This 0.63 release fixes multiple security holes in previous versions of PuTTY, which can allow an SSH-2 server to make PuTTY overrun or underrun buffers and crash. ... These vulnerabilities can be triggered before host key verification, which means that you are not even safe...

HTTP Format Sizes (CVE-2007-0774)

It is good security practice to limit the sizes of different elements in HTTP request and response. This reduces the chance for buffer overruns and limits the size of code that can be inserted into the header...

Sun Microsystems SunScreen Firewall - Privilege Escalation

/ Sun Microsystems SunScreen Firewall Root Exploit discovered & exploited by Kingcope January 2011 The SunScreen Firewall can be administrated remotely via a java protocol service which is running on port 3858 on a SunOS machine. This Java Service contains numerous buffer overruns 2 of which I am...