[Backports-security-announce] Security Update for linuxdcpp

Gerfried Fuchs uploaded new packages for linuxdcpp which fixed the following security problems: CVE-2008-2953, Debian Bug 488630 Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

[SECURITY] Fedora 8 Update: linuxdcpp-1.0.1-2.fc8

LinuxDC++ is a Linux port of DC++, a popular client for Direct Connect netw ork...

[SECURITY] Fedora 9 Update: linuxdcpp-1.0.1-3.fc9

LinuxDC++ is a Linux port of DC++, a popular client for Direct Connect netw ork...

DC++私密消息远程拒绝服务漏洞

BUGTRAQ ID: 30037 CVE ID：CVE-2008-2954 CNCVE ID：CNCVE-20082954 DC++是一款开放源码的免费的P2P客户端软件。 DC++不正确处理私密消息，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 DC++ 0.706 可参考如下补丁信息： http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diff?r1=1.14&r2=1.15&sortby=date...

CVE-2008-2953

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

CVE-2008-2954

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

CVE-2008-2954

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

Out-of-bounds

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

CVE-2008-2953

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

Null pointer dereference

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

CVE-2008-2954

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

CVE-2008-2953

CVE-2008-2953 affects Linux DC++ (linuxdcpp) up to version 0.707; the issue is a remote denial of service caused by a NULL pointer dereference triggered by "partial file list requests". Fedora/Red Hat advisories indicate upgrading to a fixed version (0.707 or later) as the remediation. Exploitati...

CVE-2008-2953

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

CVE-2008-2953

Removed by vendor...

CVE-2008-2954

CVE-2008-2954 / CVE-2008-2953 (Linux DC++: linuxdcpp) affect Linux DC++ (linuxdcpp) clients prior to 0.707. The issues stem from handling of messages and file lists: an empty private message can trigger an out-of-bounds read (CVE-2008-2954) and partial file list requests can cause a NULL pointer ...

CVE-2008-2954

Removed by vendor...

CVE-2008-2954: Improper Input Validation

client/NmdcHub.cpp in Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via an empty private message, which triggers an out-of-bounds read...

CVE-2008-2953: Improper Input Validation

Linux DC++ linuxdcpp before 0.707 allows remote attackers to cause a denial of service crash via "partial file list requests" that trigger a NULL pointer dereference...

Unfixed XSS vulnerability at www.washingtondcrealestatezoom.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.washingtondcrealestatezoom.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. It...

samba: send_mailslot() buffer overflow

Stack-based buffer overflow in the sendmailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON...