Debian DSA-541-1 : icecast-server - missing escape

Markus Worle discovered a cross site scripting problem in status-display list.cgi of the icecast internal webserver, an MPEG layer III streaming server. The UserAgent variable is not properly htmlescaped so that an attacker could cause the client to execute arbitrary Java script commands...

Debian DSA-349-1 : nfs-utils - buffer overflow

The logging code in nfs-utils contains an off-by-one buffer overrun when adding a newline to the string being logged. This vulnerability may allow an attacker to execute arbitrary code or cause a denial of service condition by sending certain RPC requests. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 500-1] New flim packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 500-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 1st, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 445-1] New lbreakout2 packages fix buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 445-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 427-1] New Linux 2.4.17 packages fix local root exploit (mips+mipsel)

-------------------------------------------------------------------------- Debian Security Advisory DSA 427-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA-348-1] New traceroute-nanog packages fix integer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 348-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 11th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-347-1] New teapop packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 347-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA-337-1] New gtksee packages fix buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 337-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 29th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 224-1] New canna packages fix buffer overflow and denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 224-1 [email protected] http://www.debian.org/security/ Martin Schulze January 8th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 220-1] New squirrelmail packages fix cross site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 220-1 [email protected] http://www.debian.org/security/ Martin Schulze January 2nd, 2003 http://www.debian.org/security/faq -...

[SECURITY] Security fixed versions of sparc binaries available

==================================================================== Debian GNU/Linux Security May 17, 1998 We have received reports that former versions of procps, shadow, fakeroot, gzip, perl and bind in hamm were vulnerable to some exploits. Please refer to the following web pages to get more...