[SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 684-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 684-1] New typespeed packages fix arbitrary group games code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 684-1 [email protected] http://www.debian.org/security/ Martin Schulze February 16th, 2005 http://www.debian.org/security/faq -...

DSA-684-1 typespeed - format string

Bulletin has no description...

Debian DSA-682-1 : awstats - missing input sanitizing

In addition to CAN-2005-0116 more vulnerabilities have been found in awstats, a powerful and featureful web server log analyzer with a CGI frontend. Missing input sanitising can cause arbitrary commands to be executed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-683-1 : postgresql - buffer overflows

Several buffer overflows have been discovered in PL/PgSQL as part of the PostgreSQL engine which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

typespeed -- arbitrary code execution

Debian reports: Ulf Härnhammar from the Debian Security Audit Project discovered a problem in typespeed, a touch-typist trainer disguised as game. This could lead to a local attacker executing arbitrary code...

[SECURITY] [DSA 681-1] New synaesthesia packages fix unauthorised file access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 681-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 681-1] New synaesthesia packages fix unauthorised file access

-------------------------------------------------------------------------- Debian Security Advisory DSA 681-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 680-1] New htdig packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 680-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

GLSA-200501-43 : f2c: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200501-43 f2c: Insecure temporary file creation Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that f2c creates temporary files in world-writeable directories with predictable names. Impact : A local...

Debian DSA-680-1 : htdig - unsanitised input

Michael Krax discovered a cross site scripting vulnerability in ht://dig, a web search system for an intranet or small internet. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-680. The te...

[SECURITY] [DSA 677-1] New sympa packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 677-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 677-1] New sympa packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 677-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 676-1] New xpcd packages fix arbitrary code execution as root

-------------------------------------------------------------------------- Debian Security Advisory DSA 676-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 676-1] New xpcd packages fix arbitrary code execution as root

-------------------------------------------------------------------------- Debian Security Advisory DSA 676-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 675-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2005 http://www.debian.org/security/faq -...

Debian DSA-670-1 : emacs20 - format string

Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs, the well-known editor. Via connecting to a malicious POP server an attacker can execute arbitrary code under the privileges of group mail. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-668-1 : postgresql - privilege escalation

John Heasman and others discovered a bug in the PostgreSQL engine which would allow any user load an arbitrary local library into it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-668. T...

Debian DSA-669-1 : php3 - several vulnerabilities

Two vulnerabilities have been discovered in php4 which also apply to the version of php3 in the stable Debian distribution. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-0594 The memorylimit functionality allows remote attackers to execute arbitra...

Debian DSA-672-1 : xview - buffer overflows

Erik Sjolund discovered that programs linked against xview are vulnerable to a number of buffer overflows in the XView library. When the overflow is triggered in a program which is installed setuid root a malicious user could perhaps execute arbitrary code as privileged user. %NASLMINLEVEL 70300 ...