2939 matches found
DEBIAN-CVE-2003-0060
Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center KDC before 1.2.5 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in Kerberos principal names...
DEBIAN-CVE-2002-1403
dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script...
DEBIAN-CVE-2002-1388
Cross-site scripting XSS vulnerability in MHonArc before 2.5.14 allows remote attackers to inject arbitrary HTML into web archive pages via HTML mail messages...
DEBIAN-CVE-2002-2261
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'checkrelay' function by spoofing a blank DNS hostname...
DEBIAN-CVE-2002-1746
Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets...
DEBIAN-CVE-2002-2267
bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file...
DEBIAN-CVE-2002-1956
ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files...
DEBIAN-CVE-2002-1275
Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."...
DEBIAN-CVE-2002-1226
Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the 1 kadmind and 2 kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows CVE-2002-1225...
DEBIAN-CVE-2002-1225
Multiple buffer overflows in Heimdal before 0.5, possibly in both the 1 kadmind and 2 kdc servers, may allow remote attackers to gain root access...
DEBIAN-CVE-2002-1174
Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 long headers that are not properly processed by the readheaders function, or 2 via long Received: headers, which are not properly parsed by the parsereceived...
DEBIAN-CVE-2002-1154
anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service disk consumption by using the command to report updates more frequently and fill the web server error log...
DEBIAN-CVE-2002-0896
The throttle capability in Swatch may fail to report certain events if 1 the same type of event occurs after the throttle period, or 2 when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection...
[SECURITY] [DSA 163-1] New mhonarc packages fix cross site scripting problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 163-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2002 http://www.debian.org/security/faq -...
DEBIAN-CVE-2002-0875
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group...
DEBIAN-CVE-2001-1562
Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename...
DEBIAN-CVE-2014-9586
Bulletin has no description...
PT-2005-5579 · Debian +1 · Gftp-Gtk +5
Name of the Vulnerable Software and Affected Versions: gftp versions prior to 2.0.18 gftp-common affected versions not specified gftp-gtk affected versions not specified gftp-text affected versions not specified Description: The issue concerns multiple vulnerabilities in the gftp package of the...