Debian Security Advisory DSA 2631-1 (squid3 - denial of service)

Squid3, a fully featured Web proxy cache, is prone to a denial of service attack due to memory consumption caused by memory leaks in cachemgr.cgi: CVE-2012-5643 squid's cachemgr.cgi was vulnerable to excessive resource use. A remote attacker could exploit this flaw to perform a denial of service...

[SECURITY] [DSA 2630-1] postgresql-8.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2630-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 20, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2620-1 (rails - several vulnerabilities)

Two vulnerabilities were discovered in Ruby on Rails, a Ruby framework for web application development. CVE-2013-0276 The blacklist provided by the attrprotected method could be bypassed with crafted requests, having an application-specific impact. CVE-2013-0277 In some applications, the...

Debian Security Advisory DSA 2616-1 (nagios3 - buffer overflow in CGI scripts)

A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A malicious client could craft a request to history.cgi and cause application crashes. OpenVAS Vulnerability Test $Id: deb2616.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated fro...

Debian Security Advisory DSA 2615-1 (libupnp4 - several vulnerabilities)

Multiple stack-based buffer overflows were discovered in libupnp4, a library used for handling the Universal Plug and Play protocol. HD Moore from Rapid7 discovered that SSDP queries where not correctly handled by the uniqueservicename function. An attacker sending carefully crafted SSDP queries ...

RHEL 5 : jabberd (RHSA-2011:0882)

An updated jabberd package that fixes one security issue is now available for Red Hat Network Satellite 5.4.1 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

RHEL 5 : jabberd (RHSA-2011:0881)

An updated jabberd package that fixes one security issue is now available for Red Hat Network Proxy 5.4.1 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Debian Security Advisory DSA 2608-1 (qemu - buffer overflow)

It was discovered that the e1000 emulation code in QEMU does not enforce frame size limits in the same way as the real hardware does. This could trigger buffer overflows in the guest operating system driver for that network card, assuming that the host system does not discard such frames which it...

[SECURITY] [DSA 2593-1] moin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2593-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 29, 2012 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2580-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 2580-1. OpenVAS Vulnerability Test $Id: deb25801.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2580-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2570-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2570-1. OpenVAS Vulnerability Test $Id: deb25701.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2570-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

[SECURITY] [DSA 2572-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2572-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 4, 2012 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2561-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 2561-1. OpenVAS Vulnerability Test $Id: deb25611.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2561-1 tiff Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] [DSA 2567-1] request-tracker3.8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2567-1 [email protected] http://www.debian.org/security/ Florian Weimer October 26, 2012 http://www.debian.org/security/faq -...

Debian DSA-2564-1 : tinyproxy - denial of service

gpernot discovered that Tinyproxy, a HTTP proxy, is vulnerable to a denial of service by remote attackers by sending crafted request headers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Debian Security Advisory DSA 2559-1 (libexif)

The remote host is missing an update to libexif announced via advisory DSA 2559-1. OpenVAS Vulnerability Test $Id: deb25591.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2559-1 libexif Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2558-1 (bacula)

The remote host is missing an update to bacula announced via advisory DSA 2558-1. OpenVAS Vulnerability Test $Id: deb25581.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2558-1 bacula Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2554-1 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 2554-1. OpenVAS Vulnerability Test $Id: deb25541.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2554-1 iceape Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] [DSA 2552-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2552-1 [email protected] http://www.debian.org/security/ Luciano Bello September 26, 2012 http://www.debian.org/security/faq -...

DEBIAN-CVE-2012-1103

emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message...