Mambo Open Source, Path disclosure

KAPDA::11 - Mambo Open Source, Path disclosure KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.5.2.3 , 4.5.2.2 , 4.5.2.1 ,4.5.2 Bug: path disclosure Exploitation: Remote with browser Discussion: -------------------- Mambo is a feature-rich dynamic portal engine/conten...

[SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 878-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

DSA-548-2 imlib - unsanitised input

Bulletin has no description...

[SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 868-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 867-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2005 http://www.debian.org/security/faq -...

DSA-861-1 up-imap - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 858-1] New xloadimage packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 858-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...

DSA-857-1 graphviz - insecure temporary file

Bulletin has no description...

DSA-847-1 dia - missing input sanitising

Bulletin has no description...

Debian DSA-816-1 : xfree86 - integer overflow

Soren Sandmann discovered a bug in memory allocation for pixmap images, that can cause a crash of the X server or to execute arbitrary code. The update for the old stable distribution woody also contains a different correction for multiple vulnerabilities in libXpm DSA 607, CAN-2004-0914,...

Debian DSA-824-1 : clamav - infinite loop, buffer overflow

Two vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified : - CAN-2005-2919 A potentially infinite loop could lead to a denial of service. -...

DSA-821-1 python2.3 - integer overflow

Bulletin has no description...

DSA-816-1 xfree86 - integer overflow

Bulletin has no description...

DSA-813-1 centericq - several

Bulletin has no description...

[SECURITY] [DSA 811-1] New common-lisp-controller packages fix arbitrary code injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 811-1 [email protected] http://www.debian.org/security/ Martin Schulze September 14th, 2005 http://www.debian.org/security/faq -...

Debian DSA-796-1 : affix - remote command execution

Kevin Finisterre reports that affix, a package used to manage bluetooth sessions under Linux, uses the popen call in an unsafe fashion. A remote attacker can exploit this vulnerability to execute arbitrary commands on a vulnerable system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 798-1] New phproupware packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 798-1 [email protected] http://www.debian.org/security/ Martin Schulze September 2nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 797-1] New zsync packages fix DOS

-------------------------------------------------------------------------- Debian Security Advisory DSA 797-1 [email protected] http://www.debian.org/security/ Michael Stone September 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 796-1] New affix packages fix remote command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 796-1 [email protected] http://www.debian.org/security/ Michael Stone September 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 794-1] New polygen packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ -- Debian Security Advisory DSA 794-1 security at debian dot org email concealed http://www.debian.org/security/ Martin Schulze September 1st, 2005...