DEBIAN-CVE-2012-0064

xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab...

Debian Security Advisory DSA 102-2 (at)

The remote host is missing an update to at announced via advisory DSA 102-2. OpenVAS Vulnerability Test $Id: deb1022.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 102-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 099-1 (XChat)

The remote host is missing an update to XChat announced via advisory DSA 099-1. OpenVAS Vulnerability Test $Id: deb0991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 099-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

DEBIAN-CVE-2007-3948

connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service failed assertion via a large number of connection attempts...

Unicon-imc2环境变量本地缓冲区溢出漏洞

BUGTRAQ ID: 24719 CVECAN ID: CVE-2007-2835 unicon-imc2是Debian操作系统中所使用的中文输入法库。 unicon-imc2在使用环境变量数据时存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 unicon-imc2库没有安全地使用HOME环境变量，如果用户使用了链接到该函数库的应用程序的话就可能触发缓冲区溢出，导致以root用户权限执行任意指令。漏洞代码位于/unicon/ImmModules/cce/CCEpinyin.c文件中： static int IMMFlush char name256;...

DEBIAN-CVE-2007-1322

QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction...

davfs2 does not honour Unix permissions

davfs2 is a user-space tool to mount DAV resources into the Unix directory tree, using the Coda kernel filesystem as a backplane. Unfortunately, Andrew Pimlott discovered that such a mounted filesystem does not honour the Unix permissions that stat presents. Details are here:...

[SECURITY] [DSA 584-1] New dhcp packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 584-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 549-1] New gtk+2.0 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 549-1 [email protected] http://www.debian.org/security/ Martin Schulze September 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 251-1] New w3m packages fix cookie information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 251-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-113-1] New ncurses packages available

Package : ncurses Vulnerability : buffer overflow Problem-Type : local Debian-specific: no Several buffer overflows were fixed in the "ncurses" library in November 2000. Unfortunately, one was missed. This can lead to crashes when using ncurses applications in large windows. The Common...

[SECURITY] [DSA 102-2] New at packages really fix heap corruption vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 102-2 [email protected] http://www.debian.org/security/ Martin Schulze January 18th, 2002 - -------------------------------------------------------------------------- Package : at...

[SECURITY] New version of Debian php4 packages released (updated)

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 14, 2000 - ---------------------------------------------------------------------------- Package: php4 Vulnerability:...

[SECURITY] new version of procmail with security fixes

A new version of procmail has been released which fixes a couple of buffer overflows and has extra security checks. We recommend you upgrade your procmail package immediately. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.1 alias slink...

[SECURITY] Current versions of lpr fixes security problem

We have received reports that buffer overflows in lprm may allow users to gain root access to the local system. We recommend that you use the binaries from hamm or any newer release. dpkg -i file.deb will install the referred file. Debian GNU/Linux 2.0 alias hamm Source archives:...

Re: [SECURITY] New version of premail fixes /tmp file problem

On Sat, May 30, 1998 at 06:53:48PM +0200, Martin Schulze wrote: We have received a report that premail uses temporary files in /tmp using unsecure methods for opening them. This is fixed in the new 0.45-4 release. We recommend you upgrade your samba package immediately. ^^^^^ This should read...