Debian DSA-100-1 : gzip - Potential buffer overflow

GOBBLES found a buffer overflow in gzip that occurs when compressing files with really long filenames. Even though GOBBLES claims to have developed an exploit to take advantage of this bug, it has been said by others that this problem is not likely to be exploitable as other security incidents...

Debian DSA-414-1 : jabber - denial of service

A vulnerability was discovered in jabber, an instant messaging server, whereby a bug in the handling of SSL connections could cause the server process to crash, resulting in a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian DSA-177-1 : pam -- serious security violation

A serious security violation in PAM was discovered. Disabled passwords i.e. those with '' in the password file were classified as empty password and access to such accounts is granted through the regular login procedure getty, telnet, ssh. This works for all such accounts whose shell field in the...

Debian DSA-352-1 : fdclone - insecure temporary directory

fdclone creates a temporary directory in /tmp as a workspace. However, if this directory already exists, the existing directory is used instead, regardless of its ownership or permissions. This would allow an attacker to gain access to fdclone's temporary files and their contents, or replace them...

Debian DSA-330-1 : tcptraceroute - failure to drop root privileges

tcptraceroute is a setuid-root program which drops root privileges after obtaining a file descriptor used for raw packet capture. However, it did not fully relinquish all privileges, and in the event of an exploitable vulnerability, root privileges could be regained. No current exploit is known,...

Debian DSA-102-2 : at - daemon exploit

zen-parse found a bug in the current implementation of at which leads into a heap corruption vulnerability which in turn could potentially lead into an exploit of the daemon user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-399-1 : epic4 - buffer overflow

Jeremy Nelson discovered a remotely exploitable buffer overflow in EPIC4, a popular client for Internet Relay Chat IRC. A malicious server could craft a reply which triggers the client to allocate a negative amount of memory. This could lead to a denial of service if the client only crashes, but...

[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay

-------------------------------------------------------------------------- Debian Security Advisory DSA 554-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 541-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 536-1] New libpng, libpng3 packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 536-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 4th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 531-1] New php4 packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 531-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 529-1] New netkit-telnet-ssl package fixes format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 529-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 526-1] New webmin packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 526-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 3rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 515-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 512-1] New gallery packages fix unauthenticated access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 512-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 2nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 512-1] New gallery packages fix unauthenticated access

-------------------------------------------------------------------------- Debian Security Advisory DSA 512-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 2nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 495-1] New Linux 2.4.16 packages fix local root exploit (arm)

-------------------------------------------------------------------------- Debian Security Advisory DSA 495-1 [email protected] http://www.debian.org/security/ Martin Schulze April 26th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 494-1] New ident2 packages fix buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 494-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 487-1] New neon packages fix format string vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 487-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 485-1] New ssmtp packages fix format string vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 485-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 14th, 2004 http://www.debian.org/security/faq -...