Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality of protected information

The Linux-headers-2.6.18-4-qemu package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

PT-2012-1030 · Debian +4 · Debian +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.33 Description: The issue is related to the I/O implementation for block devices in the Linux kernel, which does not properly handle the CLONE IO feature. This can be exploited by local users to cause a deni...

PT-2011-1044 · Vsftpd +2 · Vsftpd +2

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.32 and earlier Description: The issue is related to the handling of network namespaces in the Linux kernel. It does not properly handle a high rate of creation and cleanup of these namespaces, which can lead to a deni...

[SECURITY] [DSA 674-2] New mailman packages really fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 674-2 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

Debian DSA-254-1 : traceroute-nanog - buffer overflow

A vulnerability has been discovered in NANOG traceroute, an enhanced version of the Van Jacobson/BSD traceroute program. A buffer overflow occurs in the 'getorigin' function. Due to insufficient bounds checking performed by the whois parser, it may be possible to corrupt memory on the system stac...

Debian DSA-324-1 : ethereal - several vulnerabilities

Several of the packet dissectors in ethereal contain string handling bugs which could be exploited using a maliciously crafted packet to cause ethereal to consume excessive amounts of memory, crash, or execute arbitrary code. These vulnerabilities were announced in the following Ethereal security...

PT-2002-1005 · Debian +1 · Idle +2

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.2.1 idle package in Debian GNU/Linux affected versions not specified Description: The issue concerns a predictable temporary file name generation in the os. execvpe function from os.py in Python, potentially allowin...

Stanford University bootpd 2.4.3 Debian 2.0 - netstd

Stanford University bootpd 2.4.3 Debian 2.0 - netstd // source: https://www.securityfocus.com/bid/324/info The netstd package, included with the Debian GNU/Linux distribution is vulnerable to two buffer overflow attacks. The first is in the bootp server, the second in the FTP client. Bootpd versi...

PT-2010-5655 · Git +1 · Git +1

Name of the Vulnerable Software and Affected Versions: Git versions prior to 1.7.2.1 git-email affected versions not specified gitk affected versions not specified git-svn affected versions not specified git-arch affected versions not specified gitweb affected versions not specified git-cvs...