Debian DSA-094-1 : mailman - XSS hole

Barry A. Warsaw reported several cross-site scripting security holes in Mailman, due to non-existent escaping of CGI variables. These have been fixed upstream in version 2.0.8, and the relevant patches have been backported to version 1.1-10 in Debian. %NASLMINLEVEL 70300 C Tenable Network Securit...

Debian DSA-051-1 : netscape - unexpected javascript execution

Florian Wesch has discovered a problem reported to bugtraq with the way how Netscape handles comments in GIF files. The Netscape browser does not escape the GIF file comment in the image information page. This allows JavaScript execution in the 'about:' protocol and can for example be used to...

[SECURITY] [DSA 554-1] New sendmail packages fix potential open relay

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 554-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...

DSA-458-3 python2.2 - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 496-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 492-1] New iproute packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 492-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 18th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 491-1] New Linux 2.4.19 packages fix local root exploit (mips)

-------------------------------------------------------------------------- Debian Security Advisory DSA 491-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 442-1] New Linux 2.4.17 packages fix local root exploits and more (s390)

-------------------------------------------------------------------------- Debian Security Advisory DSA 442-1 [email protected] http://www.debian.org/security/ Martin Schulze February 19th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 424-1] New mc packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 424-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 421-1] New mod-auth-shadow packages fix password expiration checking

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 421-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 12th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA-318-1] New lyskom-server packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 318-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 12th, 2003 http://www.debian.org/security/faq -...

DSA-307 gps - multiple vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 295-1] New pptpd packages fix remote root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 295-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2003 http://www.debian.org/security/faq -...

DSA-260 file - buffer overflow

Bulletin has no description...

DSA-254 traceroute-nanog - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 218-1] New bugzilla packages fix cross site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 218-1 [email protected] http://www.debian.org/security/ Martin Schulze December 30th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA-200-1] Samba buffer overflow

Package : samba Problem type : remote exploit Debian-specific: no Steve Langasek found an exploitable bug in the password handling code in samba: when converting from DOS code-page to little endian UCS2 unicode a buffer length was not checked and a buffer could be overflowed. There is no known...

[SECURITY] [DSA 181-1] New mod_ssl packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 181-1 [email protected] http://www.debian.org/security/ Martin Schulze October 22nd, 2002 http://www.debian.org/security/faq -...

DSA-181 libapache-mod-ssl - cross site scripting

Bulletin has no description...

[SECURITY] [DSA 146-2] New dietlibc packages fix integer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 146-2 [email protected] http://www.debian.org/security/ Martin Schulze August 8th, 2002 - -------------------------------------------------------------------------- Package : dietlibc...