[SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-3 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 560-1] New lesstif packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 560-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 600-1] New samba packages fix arbitrary file access

-------------------------------------------------------------------------- Debian Security Advisory DSA 600-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 559-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 558-1] New libapache-mod-dav packages fix potential denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 558-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise

-------------------------------------------------------------------------- Debian Security Advisory DSA 557-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 555-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2004 http://www.debian.org/security/faq -...

Debian DSA-427-1 : linux-kernel-2.4.17-mips+mipsel - missing boundary check

Paul Starzetz discovered a flaw in bounds checking in mremap in the Linux kernel present in version 2.4.x and 2.6.x which may allow a local attacker to gain root privileges. Version 2.2 is not affected by this bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian DSA-251-1 : w3m - missing HTML quoting

Hironori Sakamoto, one of the w3m developers, found two security vulnerabilities in w3m and associated programs. The w3m browser does not properly escape HTML tags in frame contents and img alt attributes. A malicious HTML frame or img alt attribute may deceive a user to send their local cookies...

Debian DSA-047-1 : kernel

The kernels used in Debian GNU/Linux 2.2 have been found to have multiple security problems. This is a list of problems based on the 2.2.19 release notes as found on http://www.linux.org.uk/ : - binfmtmisc used user pages directly - the CPIA driver had an off-by-one error in the buffer code which...

Debian DSA-263-1 : netpbm-free - math overflow errors

Al Viro and Alan Cox discovered several maths overflow errors in NetPBM, a set of graphics conversion tools. These programs are not installed setuid root but are often installed to prepare data for processing. These vulnerabilities may allow remote attackers to cause a denial of service or execut...

Debian DSA-132-1 : apache-ssl - remote DoS / exploit

Mark Litchfield found a denial of service attack in the Apache web-server. While investigating the problem the Apache Software Foundation discovered that the code for handling invalid requests which use chunked encoding also might allow arbitrary code execution on 64 bit architectures...

Debian DSA-049-1 : cfingerd

Megyer Laszlo report on Bugtraq that the cfingerd daemon as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username from an ident response cfingerd could be exploited by a remote user. Since cfinger...

Debian DSA-037-1 : Athena Widget replacement libraries - insecure tempfile handling

It has been reported that the AsciiSrc and MultiSrc widget in the Athena widget library handle temporary files insecurely. Joey Hess has ported the bugfix from XFree86 to these Xaw replacements libraries. The fixes are available in nextaw 0.5.1-34potato1, xaw3d 1.3-6.9potato1, and xaw95...

Debian DSA-250-1 : w3mmee-ssl - missing HTML quoting

Hironori Sakamoto, one of the w3m developers, found two security vulnerabilities in w3m and associated programs. The w3m browser does not properly escape HTML tags in frame contents and img alt attributes. A malicious HTML frame or img alt attribute may deceive a user to send their local cookies...

Debian DSA-438-1 : linux-kernel-2.4.18-alpha+i386+powerpc - missing function return value check

Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to missing function return value check of internal functions a local attacker can gain root privileges. %NASLMINLEVEL 70300 C...

Debian DSA-424-1 : mc - buffer overflow

A vulnerability was discovered in Midnight Commander, a file manager, whereby a malicious archive such as a .tar file could cause arbitrary code to be executed if opened by Midnight Commander. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian DSA-215-1 : cyrus-imapd - buffer overflow

Timo Sirainen discovered a buffer overflow in the Cyrus IMAP server, which could be exploited by a remote attacker prior to logging in. A malicious user could craft a request to run commands on the server under the UID and GID of the cyrus server. %NASLMINLEVEL 70300 C Tenable Network Security,...

Debian DSA-313-1 : ethereal - buffer overflows, integer overflows

Timo Sirainen discovered several vulnerabilities in ethereal, a network traffic analyzer. These include one-byte buffer overflows in the AIM, GIOP Gryphon, OSPF, PPTP, Quake, Quake2, Quake3, Rsync, SMB, SMPP, and TSP dissectors, and integer overflows in the Mount and PPP dissectors. %NASLMINLEVEL...

Debian DSA-233-1 : cvs - doubly freed memory

Stefan Esser discovered a problem in cvs, a concurrent versions system, which is used for many Free Software projects. The current version contains a flaw that can be used by a remote attacker to execute arbitrary code on the CVS server under the user id the CVS server runs as. Anonymous read-onl...