Mandrake Linux Security Advisory : inn (MDKSA-2001:010)

WireX discovered a potential temporary file race condition in the inn program. This condition is due partly to the way inn is compiled and configured on some Linux distributions, including Linux-Mandrake, and partly due to the lack of information in the inn package detailing potential security...

Debian DSA-2481-1 : arpwatch - fails to drop supplementary groups

Steve Grubb from Red Hat discovered that a patch for arpwatch as shipped at least in Red Hat and Debian distributions in order to make it drop root privileges would fail to do so and instead add the root group to the list of the daemon uses. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Trivial Password Flaw Leaves MySQL Databases Exposed

There is a trivially exploitable vulnerability in MySQL that enables an attacker to gain root access to the database server. The bug, which recently was patched, stems from an error in the way that MySQL and MariaDB handle passwords, giving an attacker a chance of getting root access by supplying...

DSA-2481-1 arpwatch - fails to drop supplementary groups

Bulletin has no description...

Critical Flaw Found In WICD Component in Some Versions of Linux

UPDATE: A critical security flaw has been identified in a component of the latest version of Backtrack, a popular version of Linux that is used by security professionals for penetration testing. The flaw is in WICD, an open source utility that can be used to manage networks in Linux operating...

Debian Security Advisory DSA 2374-1 (openswan)

The remote host is missing an update to openswan announced via advisory DSA 2374-1. OpenVAS Vulnerability Test $Id: deb23741.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2374-1 openswan Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

DSA-2392-1 openssl - out-of-bounds read

Bulletin has no description...

Debian DSA-2376-2 : ipmitool - insecure PID file

It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[BSA-061] Security Update for openswan

Harald Jenny uploaded new packages for openswan which fixed the following security problems: CVE-2011-4073 Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemo...

New Approach to automatically detecting bugs and vulnerabilities in Linux

New Approach to automatically detecting bugs and vulnerabilities in Linux Australian researcher Silvio Cesare, PhD student at Deakin University has released a tool capable of automatically detecting bugs and vulnerabilities in embedded Linux libraries. Developers may "embed" or "clone" code from...

Apache Patch released for Reverse proxy Bypass Vulnerability

Apache Patch released for Reverse proxy Bypass Vulnerability Security experts at Context have discovered a hole in the Apache web server that allows remote attackers to access internal servers. Security experts are warning firms running the Apache web server to keep up to date with the latest...

[SECURITY] [DSA 2289-1] typo3-src security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2289-1 [email protected] http://www.debian.org/security/ Florian Weimer August 07, 2011 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2254-1 (oprofile)

The remote host is missing an update to oprofile announced via advisory DSA 2254-1. OpenVAS Vulnerability Test $Id: deb22541.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2254-1 oprofile Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

DSA-2254-1 oprofile - command injection

Bulletin has no description...

Debian Security Advisory DSA 2162-1 (openssl)

The remote host is missing an update to openssl announced via advisory DSA 2162-1. OpenVAS Vulnerability Test $Id: deb21621.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2162-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

The Blackbuntu Community Edition Download !

The Blackbuntu Community Edition is a Linux Live-CD based on Ubuntu 10.10 which was specially designed for security training students and practitioners of information security. Another tool for penetration testers collection that could be considered as a competition for Pentoo. It supports the...

Preemptive Protection against ProFTPD FTP Server TELNET_AIC Stack Buffer Overflow

A buffer overflow vulnerability was reported in ProFTPD FTP Server, a full featured File Transfer Protocol FTP server mainly used in Linux distributions. The vulnerability is due to insufficient validation of user input. Remote attackers could exploit this vulnerability by sending a crafted FTP...

Medium security hole in Varnish reverse proxy

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20090908 Date: 26th September 2009 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: Varnish 2.0.4 http://www.varnish-cache.org/ Vendor:...

Flare 0.6 - Local Heap Overflow Denial of Service

Flare 0.6 - Local Heap Overflow Denial of Service Exploit Title: Flare Site: xraysecurity.blogspot.com ---- Coming soon! Registers: EAX 003E0000 ECX 003E1088 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA..." EDX 41414141 EBX 00004141 ESP 0022FB0C EBP 0022FBDC ESI 003E1080 EDI 41414141 EIP...

Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation.

Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation. Synopsis Enomaly ECP up to and including v3.0.4 is believed to contain an insecure silent update mechanism that could allow a remote attacker to execute arbitrary code as root, and to inject or modify VM workloads for...