CVE-2009-2939: Improper Link Resolution Before File Access

The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files...

PT-2009-5548 · Canonical +2 · Pam-Auth-Update +3

Name of the Vulnerable Software and Affected Versions: pam-auth-update for PAM versions in Ubuntu 8.10 and 9.4, and Debian GNU/Linux affected versions not specified Description: The issue is related to the handling of an "empty selection" for system authentication modules in certain rare...

CVE-2009-3232: Improper Authentication

pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication...

[SECURITY] [DSA 1883-1] New nagios2 packages fix several cross-site scriptings

------------------------------------------------------------------------ Debian Security Advisory DSA-1883-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 10, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1882-1] New xapian-omega packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA-1882-1 [email protected] http://www.debian.org/security/ Nico Golde September 9th, 2009 http://www.debian.org/security/faq -...

Design/Logic Flaw

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages...

CVE-2009-2946

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages...

CVE-2009-2946

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages...

CVE-2009-2946

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages...

CVE-2009-2946

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages...

CVE-2009-2946: Undefined Security Weakness

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages...

[SECURITY] [DSA 1878-1] New devscripts packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1878-1 [email protected] http://www.debian.org/security/ Florian Weimer September 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1876-1 [email protected] http://www.debian.org/security/ Florian Weimer September 01, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1867-1] New kdelibs packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1867-1 [email protected] http://www.debian.org/security/ Steffen Joeris August 19, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1865-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1865-1 [email protected] http://www.debian.org/security/ dann frazier Aug 16, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1863-1] New zope2.10/zope2.9 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1863-1 [email protected] http://www.debian.org/security/ Nico Golde August 15th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1854-1] New APR packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1854-1 [email protected] http://www.debian.org/security/ Florian Weimer August 08, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1853-1] New memcached packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1853-1 [email protected] http://www.debian.org/security/ Nico Golde August 7th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery

------------------------------------------------------------------------ Debian Security Advisory DSA-1849-1 [email protected] http://www.debian.org/security/ Florian Weimer August 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1834-2] New apache/apache2-mpm-itk fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1834-2 [email protected] http://www.debian.org/security/ Stefan Fritsch July 31, 2009 http://www.debian.org/security/faq -...