306 matches found
DSA-3088-1 qemu-kvm - security update
Bulletin has no description...
Debian Security Advisory DSA 3087-1 (qemu - security update)
Paolo Bonzini of Red Hat discovered that the blit region checks were insufficient in the Cirrus VGA emulator in qemu, a fast processor emulator. A privileged guest user could use this flaw to write into qemu address space on the host, potentially escalating their privileges to those of the qemu...
Debian DSA-3044-1 : qemu-kvm - security update
Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware : - Various security issues have been found in the block qemu drivers. Malformed disk images might result in the execution of arbitrary code. - A NULL pointer dereference in SLIRP may result in...
DSA-3032-1 bash - security update
Bulletin has no description...
Debian DSA-3001-1 : wordpress - security update
Multiple security issues have been discovered in Wordpress, a web blogging tool, resulting in denial of service or information disclosure. More information can be found in the upstream advisory at https://wordpress.org/news/2014/08/wordpress-3-9-2/. %NASLMINLEVEL 70300 C Tenable Network Security,...
DSA-2808-1 openjpeg - several
Bulletin has no description...
Ubuntu: Security Advisory (USN-2006-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 27671-1] proftpd-dfsg security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2767-1 [email protected] http://www.debian.org/security/ Nico Golde September 29, 2013 http://www.debian.org/security/faq -...
Debian DSA-2767-1 : proftpd-dfsg - denial of service
Kingcope discovered that the modsftp and modsftppam modules of proftpd, a powerful modular FTP/SFTP/FTPS server, are not properly validating input, before making pool allocations. An attacker can use this flaw to conduct denial of service attacks against the system running proftpd resource...
[SECURITY] [DSA 27671-1] proftpd-dfsg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2767-1 [email protected] http://www.debian.org/security/ Nico Golde September 29, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2767-1 (proftpd-dfsg - denial of service)
Kingcope discovered that the modsftp and modsftppam modules of proftpd, a powerful modular FTP/SFTP/FTPS server, are not properly validating input, before making pool allocations. An attacker can use this flaw to conduct denial of service attacks against the system running proftpd resource...
Debian: Security Advisory (DSA-2767-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-2767-1 proftpd-dfsg - denial of service
Bulletin has no description...
Debian Security Advisory DSA 2753-1 (mediawiki - information leak)
It was discovered that in Mediawiki, a wiki engine, several API modules allowed anti-CSRF tokens to be accessed via JSONP. These tokens protect against cross site request forgeries and are confidential. OpenVAS Vulnerability Test $Id: deb2753.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generat...
Debian DSA-2667-1 : mysql-5.5 - several vulnerabilities
Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to a new upstream version, 5.5.31, which includes additional changes, such as performance improvements and corrections for data loss defects. %NASLMINLEVEL 70300 C Tenable Networ...
Debian Security Advisory DSA 2612-2 (ircd-ratbox - programming error)
It was discovered that a bug in the server capability negotiation code of ircd-ratbox could result in denial of service. OpenVAS Vulnerability Test $Id: deb2612.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2612-2 using nvtgen 1.0 Script version: 2.0 Author: Greenbone...
Debian DSA-2606-1 : proftpd-dfsg - symlink race
It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
[SECURITY] [DSA 2606-1] proftpd-dfsg security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2606-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2606-1 (proftpd-dfsg - symlink race)
It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. OpenVAS Vulnerability Test $Id: deb2606.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generate...
Debian: Security Advisory (DSA-2606-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...