MDKA-2007:079 : postfix

This update to the postfix package fixes two bugs in the chroot script that in some cases could have prevented postfix from working at all: - The chroot script would malfunction if no postfix dynamic maps were installed - The chroot script would not enforce a safe umask, and could create a chroot...

SUSE-SA:2006:057: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:057 kernel. Various security problems were found and fixed in the Linux kernel. We have released updates for following distributions: - SUSE Linux Enterprise Server 9 on September 21st - SUSE Linux Enterprise 10 on September 26th ...

SUSE-SA:2006:079: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:079 kernel. The Linux 2.6 kernel has been updated to fix various security issues. On SUSE Linux Enterprise Server 9 and SUSE Linux Enterprise 10 and their derived products this update also contains various bugfixes. %NASLMINLEVEL...

Fedora Core 6 : bind-9.3.4-1.fc6 (2007-147)

Updated to version 9.3.4 which contains two security bugfixes - Serialise validation of type ANY responses. RT 16555 - It was possible to dereference a freed fetch context. RT 16584 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora Core 5 : gdb-6.3.0.0-1.134.fc5 (2006-975)

This is a security update for CVE-2006-4146. In addition other bugfixes are listed below. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

[Full-disclosure] WordPress release 2.0.5 includes about 50 bugfixes

It appears that WordPress version 2.0.5 has been released. It includes several bugfixes and it is a security release as well. More details available at http://wordpress.org/development/2006/10/205-ronan/ Changelog entry available too:...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CentOS 3 / 4 : gaim (CESA-2005:365)

An updated gaim package that fixes multiple denial of service issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A buffer overflow bug was found in the wa...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:018)

A number of vulnerabilities have been corrected in the Linux kernel : A race condition in the 2.6 kernel could allow a local user to cause a DoS by triggering a core dump in one thread while another thread has a pending SIGSTOP CVE-2005-3527. The ptrace functionality in 2.6 kernels prior to...

[Full-disclosure] ZRCSA-200505: libremail - "pop.c" Format String Vulnerability

libremail - "pop.c" Format String Vulnerability Zone-H Research Center Security Advisory 200505 http://www.zone-h.fr Date of release: 16/12/2005 Software: libremail http://libremail.tuxfamily.org/en/ Affected versions: = 1.1.0 Risk: Low/Medium Discovered by: Mehdi Oudad "deepfear" from the Zone-H...

phpBB Blog 2.2.2 SQL inj. vuln.

phpBB Blog 2.2.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpbb-blog-222-sql-inj-vuln.html vendor:http://www.outshine.com/phpbbblog/ affected version:2.2.2 and prior Product Description: This is a blog system for phpBB. It...

Linux Kernel 2.4.x2.6.x - Bluez BlueTooth Signed Buffer Index Privilege Escalation (2)

Linux Kernel 2.4.x2.6.x - Bluez BlueTooth Signed Buffer Index Privilege Escalation 2 / Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o...

Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)

Exploit for linux platform in category local exploits =========================================================================== Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit update =========================================================================== / Due to many...

Linux Kernel 2.4.x/2.6.x - 'Bluez' BlueTooth Signed Buffer Index Privilege Escalation (2)

/ Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o bugfixes qobaiashi@voyager:/w00nf/kernelsploit ./ongbak -100222 -|-bluez local root...

phpBB 2.0.17 released

Hi everyone, phpBB Group announces the release of phpBB 2.0.17, the "no, we did not forget naming it last time" release. This release addresses several bugfixes and some low security issues as well as the recently seemingly wide-spread XSS issue only affecting Internet Explorer. Please have a loo...

SUSE-SA:2005:038: clamav

The remote host is missing the patch for the advisory SUSE-SA:2005:038 clamav. This security update upgrades the Clamav virus scan engine to the version 0.68.1. Among other bugfixes and improvements, this update fixes a bug in the Quantum decompressor routines that can be used for a remote denial...

XV

New XV image viewer packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. Format string and other issues could cause a crash or execution of arbitrary code if a specially crafted image is loaded with XV. Here are the details from the Slackware 10.1...

phpBB 2.0.16 released

Hi everyone, phpBB Group announces the release of phpBB 2.0.16. This release addresses some bugfixes and one critical security issue. To fix this, please apply the following change: In viewtopic.php Find: $message = strreplace'"', '"', substr@pregreplace'?^+|?Rse', "@pregreplace'b" . strreplace''...

egroupware100007.txt

GulfTech Security Research April 20th, 2005 Vendor : eGroupware URL : http://www.egroupware.org/ Version : Versions Prior To 1.0.0.007 Risk : Multiple Vulnerabilities Description: eGroupware is a very popular open source web based collaboration software that can be used within an intranet, or...

Multiple eGroupware Vulnerabilities

GulfTech Security Research April 20th, 2005 Vendor : eGroupware URL : http://www.egroupware.org/ Version : Versions Prior To 1.0.0.007 Risk : Multiple Vulnerabilities Description: eGroupware is a very popular open source web based collaboration software that can be used within an intranet, or...