[Backports-security-announce] Security Update for mediawiki

Gerfried Fuchs uploaded new packages for mediawiki which fixed the following security problems: CVE-2008-5249, Debian BTS 508868 Cross-site scripting XSS vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[Backports-security-announce] Security Update for mediawiki

Gerfried Fuchs uploaded new packages for mediawiki which fixed the following security problems: CVE-2008-5249, Debian BTS 508868 Cross-site scripting XSS vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Debian Security Advisory DSA 1733-1 (vim)

The remote host is missing an update to vim announced via advisory DSA 1733-1. OpenVAS Vulnerability Test $Id: deb17331.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1733-1 vim Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1732-1] New squid3 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1732 [email protected] http://www.debian.org/security/ Steffen Joeris March 03, 2009 http://www.debian.org/security/faq -...

DSA-1733-1 vim - multiple vulnerabilities

Bulletin has no description...

Debian DSA-1730-1 : proftpd-dfsg - SQL injection vulnerabilites

The security update for proftpd-dfsg in DSA-1727-1 caused a regression with the postgresql backend. This update corrects the flaw. Also it was discovered that the oldstable distribution etch is not affected by the security issues. For reference the original advisory follows. Two SQL injection...

DSA-1729-1 gst-plugins-bad0.10 - multiple vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1719-2] New GNUTLS packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1719-2 [email protected] http://www.debian.org/security/ Florian Weimer February 28, 2009 http://www.debian.org/security/faq -...

CentOS Update for krb5-devel CESA-2008:0180 centos4 x86_64

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2008:0180 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

CentOS Update for krb5 CESA-2008:0181-01 centos2 i386

Check for the Version of krb5 OpenVAS Vulnerability Test CentOS Update for krb5 CESA-2008:0181-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for krb5 CESA-2008:0181-01 centos2 i386

Check for the Version of krb5 OpenVAS Vulnerability Test CentOS Update for krb5 CESA-2008:0181-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for cobbler FEDORA-2008-9723

Check for the Version of cobbler OpenVAS Vulnerability Test Fedora Update for cobbler FEDORA-2008-9723 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1722-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...

DSA-1722-1 libpam-heimdal - local privilege

Bulletin has no description...

DSA-1721-1 libpam-krb5 - local privilege

Bulletin has no description...

DSA-1720-1 typo3-src - several vulnerabilities

Bulletin has no description...

ZeroShell <= 1.0beta11 Remote Code Execution Vulnerability

No description provided by source. ==================================================== ZeroShell = 1.0beta11 Remote Code Execution Original Advisory: http://www.ikkisoft.com/stuff/LC-2009-01.txt luca.carettoniatikkisoftdotcom ==================================================== ZeroShell...

ZeroShell <= 1.0beta11 Remote Code Execution

======================================================================== ZeroShell = 1.0beta11 Remote Code Execution ======================================================================== Affected Software: ZeroShell = 1.0beta11 Severity: High Local/Remote: Remote Author: Luca Carettoni -...

Debian: Security Advisory (DSA-1717-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZeroShell Code Execution

======================================================================== ZeroShell /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=user The parameter "type" is used to distinguish between users, CA and host certificates. Unfortunately, this parameter is passed to the following code wi...