[Full-disclosure] Mercur SP4 IMAPD

The attached exploits several signedness bugs in the NTLM implementation of Mercur IMAPD www.atrium-software.com to give the attacker complete control over a memcpy to a stack variable... non-authenticated In this case, memcpybuf, src+a, b with 'a', and 'b' being user controlled and buf 7208 byte...

CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Mandrake Linux Security Advisory : libwpd (MDKSA-2007:063)

iDefense reported several overflow bugs in libwpd. An attacker could create a carefully crafted Word Perfect file that could cause an application linked with libwpd, such as OpenOffice, to crash or possibly execute arbitrary code if the file was opened by a victim. Updated packages have been...

Mac OS X kernel "fpathconf()" syscall fails to properly handle unknown file types

Overview A vulnerability in the Mac OS X kernel could allow an authenticated local attacker to cause a denial of service. Description The fpathconf system call provides a method for applications to determine the current value of a configurable system limit or option variable associated with a fil...

CentOS 3 / 4 : seamonkey (CESA-2007:0077)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 February 2007 Packages for Red Hat Enterprise Linux 4 have been...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2007:0077)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 February 2007 Packages for Red Hat Enterprise Linux 4 have been...

Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2) — Mozilla

As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases we fixed several bugs to improve the stability of the product. Some of these were crashes that showed evidence of memory corruption and we presume that with enough effort at least some of these could be exploited to run arbitrary code...

SUSE-SA:2007:013: xine-ui,xine-lib,xine-extra,xine-devel

The remote host is missing the patch for the advisory SUSE-SA:2007:013 xine-ui,xine-lib,xine-extra,xine-devel. This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. Since SUSE Linux version 10.1 format string bugs are not...

MDKA-2005:057 : drakxtools

A number of bugs have been fixed in this new drakxtools package, primarily within the diskdrake, drakconnect and drakroam programs: Diskdrake fixes include: - handle 'users' the way 'user' is handled - handle dmraid-1.0.0 RC9 19654 Drakconnect fixes include: - don't screw up eagle-usb devices if...

Mandrake Linux Security Advisory : gtk+2.0 (MDKSA-2007:039)

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 allows context-dependent attackers to cause a denial of service crash via a malformed image file. CVE-2007-0010 The version of libgtk+2.0 shipped with Mandriva Linux 2007 fails various portions of the lsb-test-desktop test suite, par...

USN-417-3: PostgreSQL regression

USN-417-2 fixed a severe regression in the PostgreSQL server that was introduced in USN-417-1 and caused some valid queries to be aborted with a type error. This update fixes a similar but much less prominent error. At the same time, PostgreSQL is updated to version 8.1.8, which fixes a range of...

Fedora Core 5 : bind-9.3.4-1.fc5 (2007-164)

Fixed two security bugs - DNSSEC denial of service - BIND might crash after attempting to read free-ed memory and some common bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Multiple Orcale security vulnerabilities.... again...

Released security update fixes 17 security vulnerabilities for Oracle Database, 9 vulnerabilities in Oracle HTTP Server, 12 security vulnerabilities for Oracle Application Server, 7 vulnerabilities for Oracle E-Business Suite, 6 security bugs in Oracle Enterprise Manager, 3 bugs in Oracle...

How To Find QQ's Bugs-bug warning-the black bar safety net

How To Find QQ' Bugs. For the QQ installation file scan to the next, almost no encryption program file, but the specific analysis is more wordy. But I think so much of a mess of things in a large heap, bufferflow is certainly might exist. But lazy of going to get. In the QQ directory below have a...

CVE-2007-0303

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs."...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs."...

CVE-2007-0303

Technical details about CVE-2007-0303 are not provided in the supplied documents. The initial entry notes unspecified vulnerabilities in Zina 1.0rc1 and earlier with unknown impact; monitor for updates.

Fedora Core 4 : mysql-4.1.19-1.FC4.1 (2006-554)

4.1.19 fixes several moderate-severity security issues: see CVE-2006-0903 CVE-2006-1516 CVE-2006-1517 CVE-2006-1518, also our bugs 180467 180639 182025 183261 190866 190868 190870 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora Core 6 : dovecot-1.0-1.rc15.fc6 (2006-1396)

Tue Nov 21 2006 Petr Rockai - 1.0-1.rc15 - update to latest upstream, fixes a few bugs, plus a security vulnerability 216510, CVE-2006-5973 - Tue Oct 10 2006 Petr Rockai - 1.0-0.3.rc7 - fix few inconsistencies in specfile, fixes 198940 - Wed Oct 4 2006 Petr Rockai - 1.0-0.2.rc7 - fix default...

Fedora Core 5 : kernel-2.6.18-1.2257.fc5 (2006-1470)

This update rebases to 2.6.18.6rc2, which fixes the following security bugs : bridge: fix possible overflow in getfdbentries CVE-2006-5751 Bluetooth: Add packet size checks for CAPI messages CVE-2006-6106 In addition, a number of non-security related bugs have been fixed. Complete changelogs are...