Debian DSA-350-1 : falconseye - buffer overflow

The falconseye package is vulnerable to a buffer overflow exploited via a long -s command line option. This vulnerability could be used by an attacker to gain gid 'games' on a system where falconseye is installed. Note that falconseye does not contain the file permission error CAN-2003-0359 which...

Debian DSA-399-1 : epic4 - buffer overflow

Jeremy Nelson discovered a remotely exploitable buffer overflow in EPIC4, a popular client for Internet Relay Chat IRC. A malicious server could craft a reply which triggers the client to allocate a negative amount of memory. This could lead to a denial of service if the client only crashes, but...

Debian DSA-414-1 : jabber - denial of service

A vulnerability was discovered in jabber, an instant messaging server, whereby a bug in the handling of SSL connections could cause the server process to crash, resulting in a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian DSA-330-1 : tcptraceroute - failure to drop root privileges

tcptraceroute is a setuid-root program which drops root privileges after obtaining a file descriptor used for raw packet capture. However, it did not fully relinquish all privileges, and in the event of an exploitable vulnerability, root privileges could be regained. No current exploit is known,...

Debian DSA-473-1 : oftpd - denial of service

A vulnerability was discovered in oftpd, an anonymous FTP server, whereby a remote attacker could cause the oftpd process to crash by specifying a large value in a PORT command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-386-1 : libmailtools-perl - input validation bug

The SuSE security team discovered during an audit a bug in Mail::Mailer, a Perl module used for sending email, whereby potentially untrusted input is passed to a program such as mailx, which may interpret certain escape sequences as commands to be executed. This bug has been fixed by removing...

Debian DSA-450-1 : linux-kernel-2.4.19-mips - several vulnerabilities

Several local root exploits have been discovered recently in the Linux kernel. This security advisory updates the mips kernel 2.4.19 for Debian GNU/Linux. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update : - CAN-2003-0961 : An...

Debian DSA-102-2 : at - daemon exploit

zen-parse found a bug in the current implementation of at which leads into a heap corruption vulnerability which in turn could potentially lead into an exploit of the daemon user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay

-------------------------------------------------------------------------- Debian Security Advisory DSA 554-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 541-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 536-1] New libpng, libpng3 packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 536-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 4th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 531-1] New php4 packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 531-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 529-1] New netkit-telnet-ssl package fixes format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 529-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 526-1] New webmin packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 526-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 3rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 515-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 512-1] New gallery packages fix unauthenticated access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 512-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 2nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 512-1] New gallery packages fix unauthenticated access

-------------------------------------------------------------------------- Debian Security Advisory DSA 512-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 2nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 495-1] New Linux 2.4.16 packages fix local root exploit (arm)

-------------------------------------------------------------------------- Debian Security Advisory DSA 495-1 [email protected] http://www.debian.org/security/ Martin Schulze April 26th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 494-1] New ident2 packages fix buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 494-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 487-1] New neon packages fix format string vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 487-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...