[SECURITY] [DSA 1814-1] New libsndfile packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1814-1 [email protected] http://www.debian.org/security/ Nico Golde June 13th, 2009 http://www.debian.org/security/faq -...

Debian DSA-1793-1 : kdegraphics - multiple vulnerabilities

kpdf, a Portable Document Format PDF viewer for KDE, is based on the xpdf program and thus suffers from similar flaws to those described in DSA-1790. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0146 Multiple buffer overflows in the JBIG2 decoder...

Linux Kernel 2.6 UDEV Local Privilege Escalation Exploit

No description provided by source. !/bin/sh Linux 2.6 bug found by Sebastian Krahmer lame sploit using LD technique by kcope in 2009 tested on debian-etch,ubuntu,gentoo do a 'cat /proc/net/netlink' and set the first arg to this script to the pid of the netlink socket the pid is udevdpid - 1 most ...

[SECURITY] [DSA 1775-1] New php-json-ext packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1775-1 [email protected] http://www.debian.org/security/ Steffen Joeris April 20, 2009 http://www.debian.org/security/faq -...

Linux 2.6 Kernel UDEV Exploit

!/bin/sh Linux 2.6 bug found by Sebastian Krahmer lame sploit using LD technique by kcope in 2009 tested on debian-etch,ubuntu,gentoo do a 'cat /proc/net/netlink' and set the first arg to this script to the pid of the netlink socket the pid is udevdpid - 1 most of the time + sploit has to be UNIX...

Linux Kernel 2.6 UDEV Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits ======================================================== Linux Kernel 2.6 UDEV Local Privilege Escalation Exploit ======================================================== !/bin/sh Linux 2.6 bug found by Sebastian Krahmer lame sploit using LD...

[SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1729-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1718-1] New boinc packages fix validation bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-1718-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 08, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1705-1] New netatalk packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1705-1 [email protected] http://www.debian.org/security/ Nico Golde January 15th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1703-1] New bind9 packages fix cryptographic weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1703-1 [email protected] http://www.debian.org/security/ Florian Weimer January 12, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1686-1] New no-ip packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1686-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 14, 2008 http://www.debian.org/security/faq -...

DSA-1687-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1650-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 12, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1617-1 (refpolicy)

The remote host is missing an update to refpolicy announced via advisory DSA 1617-1. OpenVAS Vulnerability Test $Id: deb16171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1617-1 refpolicy Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1620-1] New python2.5 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1620-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 27, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy

------------------------------------------------------------------------ Debian Security Advisory DSA-1617-1 [email protected] http://www.debian.org/security/ Devin Carraway July 25, 2008 http://www.debian.org/security/faq -...

DSA-1617-1 refpolicy - incompatible policy

Bulletin has no description...

Alsaplayer < 0.99.80-rc3 Vorbis Input Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits =================================================================== Alsaplayer 0.99.80-rc3 Vorbis Input Local Buffer Overflow Exploit =================================================================== I have released this exploit for the...

alsaplayer-overflow.txt

I have released this exploit for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ With my modified version of vorbiscomment, you can generate a ogg exploit like this: whats@debian:$ vorbiscomment.whats -w -t "TITLE=$perl -e 'print...

AlsaPlayer 0.99.80-rc3 - Vorbis Input Local Buffer Overflow

AlsaPlayer 0.99.80-rc3 - Vorbis Input Local Buffer Overflow I have released this exploit for the alsaplayer bug CVE-2007-5301. You can find all the needed files at http://www.wekk.net/research/CVE-2007-5301/ With my modified version of vorbiscomment, you can generate a ogg exploit like this:...