[SECURITY] [DSA 613-1] New ethereal packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 613-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2004 http://www.debian.org/security/faq -...

Debian DSA-593-1 : imagemagick - buffer overflow

A vulnerability has been reported for ImageMagick, a commonly used image manipulation library. Due to a boundary error within the EXIF parsing routine, a specially crafted graphic image could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-600-1 : samba - arbitrary file access

A vulnerability has been discovered in samba, a commonly used LanManager-like file and printer server for Unix. A remote attacker may be able to gain access to files which exist outside of the share's defined path. Such files must still be readable by the account used for the connection, though...

Debian DSA-561-1 : xfree86 - integer and stack overflows

Chris Evans discovered several stack and integer overflows in the libXpm library which is provided by X.Org, XFree86 and LessTif. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-561. The...

[SECURITY] [DSA 585-1] New shadow packages fix unintended behaviour

-------------------------------------------------------------------------- Debian Security Advisory DSA 585-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 579-1] New abiword packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 579-1 [email protected] http://www.debian.org/security/ Martin Schulze November 1st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 574-1] New cabextract packages fix unintended directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 574-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 570-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 569-1] New netkit-telnet-ssl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 569-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution

-------------------------------------------------------------------------- Debian Security Advisory DSA 564-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution

-------------------------------------------------------------------------- Debian Security Advisory DSA 564-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-3 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise

-------------------------------------------------------------------------- Debian Security Advisory DSA 557-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2004 http://www.debian.org/security/faq -...

Debian DSA-352-1 : fdclone - insecure temporary directory

fdclone creates a temporary directory in /tmp as a workspace. However, if this directory already exists, the existing directory is used instead, regardless of its ownership or permissions. This would allow an attacker to gain access to fdclone's temporary files and their contents, or replace them...

Debian DSA-147-1 : mailman - XSS

A cross-site scripting vulnerability was discovered in mailman, a software to manage electronic mailing lists. When a properly crafted URL is accessed with Internet Explorer other browsers don't seem to be affected, the resulting webpage is rendered similar to the real one, but the JavaScript...

Debian DSA-367-1 : xtokkaetama - buffer overflow

Another buffer overflow was discovered in xtokkaetama, involving the '-nickname' command line option. This vulnerability could be exploited by a local attacker to gain gid 'games'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-100-1 : gzip - Potential buffer overflow

GOBBLES found a buffer overflow in gzip that occurs when compressing files with really long filenames. Even though GOBBLES claims to have developed an exploit to take advantage of this bug, it has been said by others that this problem is not likely to be exploitable as other security incidents...

Debian DSA-405-1 : xsok - missing privilege release

Steve Kemp discovered a problem in xsok, a single player strategy game for X11, related to the Sokoban game, which leads a user to execute arbitrary commands under the GID of games. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-193-1 : kdenetwork - buffer overflow

iDEFENSE reports a security vulnerability in the klisa package, that provides a LAN information service similar to 'Network Neighbourhood', which was discovered by Texonet. It is possible for a local attacker to exploit a buffer overflow condition in resLISa, a restricted version of KLISa. The...

Debian DSA-399-1 : epic4 - buffer overflow

Jeremy Nelson discovered a remotely exploitable buffer overflow in EPIC4, a popular client for Internet Relay Chat IRC. A malicious server could craft a reply which triggers the client to allocate a negative amount of memory. This could lead to a denial of service if the client only crashes, but...