DSA-1673-1 wireshark - several vulnerabilities

Bulletin has no description...

[Backports-security-announce] Security Update for dovecot

Gerfried Fuchs uploaded new packages for dovecot which fixed the following security problems: CVE-2008-4577, Debian Bug 502967 The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

[Backports-security-announce] Security Update for trac

Jan Wagner uploaded a new package for trac which fixed the following security problem: Some vulnerabilities have been reported in Trac, which can be exploited by malicious people to cause a DoS Denial of Service or to conduct phishing attacks. 1 An unspecified error in the HTML sanitiser filter c...

Debian Security Advisory DSA 1662-1 (mysql-dfsg-5.0)

The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1662-1. OpenVAS Vulnerability Test $Id: deb16621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1662-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

[Backports-security-announce] Security Update for ikiwiki

Alexander Wirt uploaded a new package for ikiwiki which fixed the following security problem: Feeding ikiwiki page sources containing certian forms of malformed UTF-8 can cause it to crash. This can potentially be used for a denial of service attack. For the etch-backports distribution the proble...

[SECURITY] [DSA 1666-1] New libxml2 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1666-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 17, 2008 http://www.debian.org/security/faq -...

[Backports-security-announce] Security Update for virtualbox-ose

Michael Meskes uploaded new packages for virtualbox-ose which fixed the following security problem: Debian Bug 504149 Symlink vulnerability due to bad /tmp handling allowing an attacker to overwrite any files owned by the starting user of virtualbox. For the etch-backports distribution the proble...

Debian DSA-1664-1 : ekg - missing input sanitising

It was discovered that ekg, a console Gadu Gadu client performs insufficient input sanitising in the code to parse contact descriptions, which may result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

[SECURITY] [DSA 1664-1] New ekg packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1664-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 10, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1656-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory DSA 1656-1. OpenVAS Vulnerability Test $Id: deb16561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1656-1 cupsys Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problem: CVE-2008-2957, Debian Bug 488632 The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory...

Debian DSA-1660-1 : clamav - NULL pointer dereference, resource exhaustion

Several denial-of-service vulnerabilities have been discovered in the ClamAV anti-virus toolkit : Insufficient checking for out-of-memory conditions results in NULL pointer dereferences CVE-2008-3912 . Incorrect error handling logic leads to memory leaks CVE-2008-3913 and file descriptor leaks...

[Backports-security-announce] Security Update for proftpd-dfsg

Francesco Paolo Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2008-4242, Debian Bug 502674 ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF...

[Backports-security-announce] Security Update for proftpd-dfsg

Francesco Paolo Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2008-4242, Debian Bug 502674 ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF...

[Backports-security-announce] Security Update for libspf2

Gerfried Fuchs uploaded new packages for libspf2 which fixed the following security problem: CVE-2008-2469 Fix buffer overflows in DNS response parsing. For the etch-backports distribution the problem has been fixed in version 1.2.5.dfsg-5+lenny1bpo40+1. For the lenny distribution the problem has...

[Backports-security-announce] Security Update for libspf2

Gerfried Fuchs uploaded new packages for libspf2 which fixed the following security problem: CVE-2008-2469 Fix buffer overflows in DNS response parsing. For the etch-backports distribution the problem has been fixed in version 1.2.5.dfsg-5+lenny1bpo40+1. For the lenny distribution the problem has...

CVE-2008-4609

The TCP implementation in 1 Linux, 2 platforms based on BSD Unix, 3 Microsoft Windows, 4 Cisco products, and probably other operating systems allows remote attackers to cause a denial of service connection queue exhaustion via multiple vectors that manipulate information in the TCP state table, a...

DSA-1656-1 cupsys - several vulnerabilities

Bulletin has no description...

Debian DSA-1650-1 : openldap2.3 - denial of service

Cameron Hotchkies discovered that the OpenLDAP server slapd, a free implementation of the Lightweight Directory Access Protocol, could be crashed by sending malformed ASN1 requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1650-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 12, 2008 http://www.debian.org/security/faq -...