2817 matches found
Debian DSA-611-1 : htget - buffer overflow
'infamous41md' discovered a buffer overflow in htget, a file grabber that will get files from HTTP servers. It is possible to overflow a buffer and execute arbitrary code by accessing a malicious URL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian DSA-612-1 : a2ps - unsanitised input
Rudolf Polzer discovered a vulnerability in a2ps, a converter and pretty-printer for many formats to PostScript. The program did not escape shell meta characters properly which could lead to the execution of arbitrary commands as a privileged user if a2ps is installed as a printer filter...
[SECURITY] [DSA 610-1] New cscope packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 610-1 [email protected] http://www.debian.org/security/ Martin Schulze December 17th, 2004 http://www.debian.org/security/faq -...
Debian DSA-609-1 : atari800 - buffer overflows
Adam Zabrocki discovered multiple buffer overflows in atari800, an Atari emulator. In order to directly access graphics hardware, one of the affected programs is installed setuid root. A local attacker could exploit this vulnerability to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network...
[SECURITY] [DSA 605-1] New viewcvs packages fix information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...
[Full-Disclosure] [SECURITY] [DSA 605-1] New viewcvs packages fix information leak
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 605-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2004 http://www.debian.org/security/faq -...
Debian DSA-605-1 : viewcvs - settings not honored
Haris Sehic discovered several vulnerabilities in viewcvs, a utility for viewing CVS and Subversion repositories via HTTP. When exporting a repository as a tar archive the hidecvsroot and forbidden settings were not honoured enough. When upgrading the package for woody, please make a copy of your...
Debian DSA-604-1 : hpsockd - missing input sanitising
'infamous41md' discovered a buffer overflow condition in hpsockd, the socks server written at Hewlett-Packard. An exploit could cause the program to crash or may have worse effect. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
[SECURITY] [DSA 603-1] New openssl packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 603-1 [email protected] http://www.debian.org/security/ Martin Schulze December 1st, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 602-1] New libgd2 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 602-1 [email protected] http://www.debian.org/security/ Martin Schulze November 29th, 2004 http://www.debian.org/security/faq -...
Debian DSA-599-1 : tetex-bin - integer overflows
Chris Evans discovered several integer overflows in xpdf, that are also present in tetex-bin, binary files for the teTeX distribution, which can be exploited remotely by a specially crafted PDF document and lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security,...
[SECURITY] [DSA 599-1] New tetex-bin packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 599-1 [email protected] http://www.debian.org/security/ Martin Schulze November 25th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 598-1] New yardradius packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 598-1 [email protected] http://www.debian.org/security/ Martin Schulze November 25th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 597-1] New cyrus-imapd packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 597-1 [email protected] http://www.debian.org/security/ Martin Schulze November 25th, 2004 http://www.debian.org/security/faq -...
Debian DSA-598-1 : yardradius - buffer overflow
Max Vozeler noticed that yardradius, the YARD radius authentication and accounting server, contained a stack overflow similar to the one from radiusd which is referenced as CAN-2001-0534. This could lead to the execution of arbitrary code as root. %NASLMINLEVEL 70300 C Tenable Network Security,...
[SECURITY] [DSA 596-2] New sudo packages removes debug output
-------------------------------------------------------------------------- Debian Security Advisory DSA 596-2 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 595-1] New bnc packages arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 595-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 592-1] New ez-ipupdate packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 592-1 [email protected] http://www.debian.org/security/ Martin Schulze November 12th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 592-1] New ez-ipupdate packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 592-1 [email protected] http://www.debian.org/security/ Martin Schulze November 12th, 2004 http://www.debian.org/security/faq -...
