Debian DSA-1268-1 : libwpd - integer overflow

iDefense reported several integer overflow bugs in libwpd, a library for handling WordPerfect documents. Attackers were able to exploit these with carefully crafted Word Perfect files that could cause an application linked with libwpd to crash or possibly execute arbitrary code. %NASLMINLEVEL 703...

DSA-1266-1 gnupg - several vulnerabilities

Bulletin has no description...

Debian DSA-1262-1 : gnomemeeting - format string

'Mu Security' discovered that a format string vulnerability in the VoIP solution GnomeMeeting allows the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1262...

CVE-2007-1277

WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via 1 an eval injection vulnerability in the ix parameter to wp-includes/feed.php, and 2 an...

DSA-1255-1 libgtop2

Bulletin has no description...

DSA-1254-1 bind9

Bulletin has no description...

DSA-1249-1 xfree86

Bulletin has no description...

WordPress Plugin SpamBam - Key Calculation Security Bypass

WordPress Plugin SpamBam - Key Calculation Security Bypass source: https://www.securityfocus.com/bid/27291/info SpamBam is prone to a security-bypass vulnerability because client-accessible data can be used to calculate verification keys. Attackers can exploit this issue to submit arbitrary form...

[SECURITY] [DSA 1248-1] New libsoup packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1248-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 12nd, 2007 http://www.debian.org/security/faq -...

WordPress Plugin SpamBam - Key Calculation Security Bypass

source: https://www.securityfocus.com/bid/27291/info SpamBam is prone to a security-bypass vulnerability because client-accessible data can be used to calculate verification keys. Attackers can exploit this issue to submit arbitrary form data via automated scripts and distribute spam...

[SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks

------------------------------------------------------------------------ Debian Security Advisory DSA-1236-1 [email protected] http://www.debian.org/security/ Steve Kemp December 13, 2006 - ------------------------------------------------------------------------ Package : enemies-of-carlotta...

DSA-1236-1 enemies-of-carlotta

Bulletin has no description...

DSA-1229-1 asterisk

Bulletin has no description...

[SECURITY] [DSA 1212-1] New openssh packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1212-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 15, 2006 - ------------------------------------------------------------------------ Package : openssh...

[SECURITY] [DSA 1208-1] New bugzilla packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1208-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 11th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1204-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 2nd, 2006 http://www.debian.org/security/faq -...

DSA-1203-1 libpam-ldap

Bulletin has no description...

Debian DSA-1087-1 : postgresql - programming error

Several encoding problems have been discovered in PostgreSQL, a popular SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2313 Akio Ishida and Yasuo Ohgaki discovered a weakness in the handling of invalidly-encoded multibyte text data...

Debian DSA-890-1 : libungif4 - several vulnerabilities

Chris Evans discovered several security related problems in libungif4, a shared library for GIF images. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-2974 NULL pointer dereference, that could cause a denial of service. - CVE-2005-3350 Out o...

Debian DSA-878-1 : netpbm-free - buffer overflow

A buffer overflow has been identified in the pnmtopng component of the netpbm package, a set of graphics conversion tools. This vulnerability could allow an attacker to execute arbitrary code as a local user by providing a specially crafted PNM file. The old stable distribution woody it not...