RHEL 2.1 / 3 : ethereal (RHSA-2005:011)

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. A number of security flaws have been discovered in Ethereal. On a system where Ethereal is running, a remote attacker could send malicious packets to trigge...

DSA-651-1 squid - buffer overflow, integer overflow

Bulletin has no description...

Microsoft Windows Kernel - '.ANI' File Parsing Crash

111111111111111111111111111111 // milw0rm.com 2004-12-25...

[slackware-security] libtiff

New libtiff packages are available for Slackware 8.1, 9.0, 9.1, 10.1, and -current to fix security issues that could lead to application crashes, or possibly execution of arbitrary code. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

USN-8-1: gaim vulnerabilities

A buffer overflow and two remote crashes were recently discovered in gaim's MSN protocol handler. An attacker could potentially execute arbitrary code with the user's privileges by crafting and sending a particular MSN message...

DSA-567-1 tiff - heap overflows

Bulletin has no description...

Debian DSA-294-1 : gkrellm-newsticker - missing quoting, incomplete parser

Brian Campbell discovered two security-related problems in gkrellm-newsticker, a plugin for the gkrellm system monitor program, which provides a news ticker from RDF feeds. The Common Vulnerabilities and Exposures project identifies the following problems : CAN-2003-0205 It can launch a web brows...

GLSA-200404-03 : Tcpdump Vulnerabilities in ISAKMP Parsing

The remote host is affected by the vulnerability described in GLSA-200404-03 Tcpdump Vulnerabilities in ISAKMP Parsing There are two specific vulnerabilities in tcpdump, outlined in reference 1 . In the first scenario, an attacker may send a specially crafted ISAKMP Delete packet which causes...

Mozilla Firefox < 2.0.0.15 Multiple Vulnerabilities

Binary data 4567.prm...

qt -- image loader vulnerabilities

Qt contains several vulnerabilities related to image loading, including possible crashes when loading corrupt GIF, BMP, or JPEG images. Most seriously, Chris Evans reports that the BMP crash is actually due to a heap buffer overflow. It is believed that an attacker may be able to construct a BMP...

libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix security issues. These issues could cause program crashes, or possibly allow arbitrary code embedded in a malicious PNG image to execute. The PNG library is widely used within the system, so all sites should...

RHEL 2.1 : glibc (RHSA-2004:383)

Updated glibc packages that fix a security flaw in the resolver as well as dlclose handling are now available. The GNU libc packages known as glibc contain the standard C libraries used by applications. A security audit of the glibc packages in Red Hat Enterprise Linux 2.1 found a flaw in the...

US-CERT Technical Cyber Security Alert TA04-217A -- Multiple Vulnerabilities in libpng

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerabilities in libpng Original release date: August 4, 2004 Last revised: -- Source: US-CERT Systems Affected Applications and systems that use the libpng library. Overview Several vulnerabilities exist in the libpng library, the most...

Fedora Core 1 : ethereal-0.10.5-0.1.1 (2004-219)

Issues have been discovered in the following protocol dissectors : - The iSNS dissector could make Ethereal abort in some cases. 0.10.3 - 0.10.4 CVE-2004-0633 - SMB SID snooping could crash if there was no policy name for a handle. 0.9.15 - 0.10.4 CVE-2004-0634 - The SNMP dissector could crash du...

Microsoft Internet Explorer - Overly Trusted Location Cache

Microsoft Internet Explorer - Overly Trusted Location Cache Overly Trusted Location Variant Method Cache Vulnerability GO! This vulnerability seems to be unstable. For some reason, it crashes my internet explorer unless the exploit is executed onlo +ad and even then it crashes sometimes. var...

Microsoft Internet Explorer - Overly Trusted Location Cache

Overly Trusted Location Variant Method Cache Vulnerability GO! This vulnerability seems to be unstable. For some reason, it crashes my internet explorer unless the exploit is executed onlo +ad and even then it crashes sometimes. var...

RHEL 2.1 : xinetd (RHSA-2003:161)

Updated xinetd packages fix a security vulnerability and other bugs. Xinetd is a master server that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for any reason. ...

IBM WebSphere Edge DoS

Server crashes on incomlete HTTP request...

Sun Java Runtime Environment 1.4.x - Font Object Assertion Failure Denial of Service

source: https://www.securityfocus.com/bid/10623/info The Sun Java Runtime Environment Font object is reportedly vulnerable to an assertion failure denial of service vulnerability. This issue is due to a failure of the process to handle exceptional conditions when processing font objects. This iss...

Various crashs and fun in Race Driver 1.20

Luigi Auriemma Application: http://www.codemasters.com/tocaracedriver/ Versions: = 1.20 Platforms: Windows Bugs: various crashs and spoofed messages Risk: medium Exploitation: remote, versus server and attached clients Date: 08 June 2004 Author: Luigi Auriemma e-mail: [email protected] web:...