2681 matches found
Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities
====================================================================== Secunia Research 21/03/2007 - XMMS Integer Overflow and Underflow Vulnerabilities - ===================================================================== Table of Contents Affected...
SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-002 Advisory Title: Palm OS Treo Find Feature System Password Bypass Authors: J.R. Wikes, Matt Cooley, & Scott King Release Date: 14-02-2007...
Debian DSA-1258-1 : mozilla-thunderbird - several vulnerabilities
Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-6497 Several vulnerabilities in the layout engine allow remote attackers to cause ...
CVE-2006-6492
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006. Notes: none...
Debian DSA-1249-1 : xfree86 - several vulnerabilities
Several vulnerabilities have been discovered in the X Window System, which may lead to privilege escalation or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-6101 Sean Larsson discovered an integer overflow in the Render extensio...
Debian DSA-1224-1 : mozilla - several vulnerabilities
Several security related problems have been discovered in Mozilla and derived products. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-4310 Tomas Kempinsky discovered that malformed FTP server responses could lead to denial of service. -...
Debian DSA-1210-1 : mozilla-firefox - several vulnerabilities
Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-2788 Fernando Ribeiro discovered that a vulnerability in the getRawDER function...
BELL-CVE-2006-5173 CVE-2006-5173 does not affect BellSoft software
Bulletin has no description...
Debian DSA-1059-1 : quagga - several vulnerabilities
Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2223 Remote attackers may obtain sensitive information via RIPv1 REQUEST packets even if the quagga...
Debian DSA-1181-1 : gzip - several vulnerabilities
Tavis Ormandy from the Google Security Team discovered several vulnerabilities in gzip, the GNU compression utility. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4334 A NULL pointer dereference may lead to denial of service if gzip is used in an...
Debian DSA-1048-1 : asterisk - several vulnerabilities
Several problems have been discovered in Asterisk, an Open Source Private Branch Exchange telephone control center. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3559 Adam Pointon discovered that due to missing input sanitising it is possible to...
Debian DSA-1034-1 : horde2 - several vulnerabilities
Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1260 Null characters in the URL parameter bypas...
Debian DSA-1085-1 : lynx-cur - several vulnerabilities
Several vulnerabilities have been discovered in lynx, the popular text-mode WWW browser. The Common Vulnerabilities and Exposures Project identifies the following vulnerabilities : - CVE-2004-1617 Michal Zalewski discovered that lynx is not able to grok invalid HTML including a TEXTAREA tag with ...
Debian DSA-1192-1 : mozilla - several vulnerabilities
Several security related problems have been discovered in Mozilla and derived products such as Mozilla Thunderbird. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-2788 Fernando Ribeiro discovered that a vulnerability in the getRawDER functio...
Debian DSA-1033-1 : horde3 - several vulnerabilities
Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4190 Several Cross-Site-Scripting vulnerabiliti...
Debian DSA-967-1 : elog - several vulnerabilities
Several security problems have been found in elog, an electronic logbook to manage notes. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2005-4439 'GroundZero Security' discovered that elog insufficiently checks the size of a buffer used for processing...
Debian DSA-1169-1 : mysql-dfsg-4.1 - several vulnerabilities
Several local vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4226 Michal Prokopiuk discovered that remote authenticated users are permitted to create and access a database if the...
[Full-disclosure] Secunia Research: Mozilla Firefox XPCOM Event Handling Memory Corruption
====================================================================== Secunia Research 27/07/2006 - Mozilla Firefox XPCOM Event Handling Memory Corruption - ====================================================================== Table of Contents Affected...
CentOS 4 : curl (CESA-2005:875)
Updated curl packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict servers, using any of th...