Debian DSA-1919-1 : smarty - several vulnerabilities

Several remote vulnerabilities have been discovered in Smarty, a PHP templating engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4810 The expandquotedtext function allows for certain restrictions in templates, like function calling and PHP...

Debian DSA-1868-1 : kde4libs - several vulnerabilities

Several security issues have been discovered in kde4libs, core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1690 It was discovered that there is a use-after-free flaw in handling certain DOM event handlers...

Debian DSA-1889-1 : icu - programming error

It was discovered that the ICU unicode library performed incorrect processing of invalid multibyte sequences, resulting in potential bypass of security mechanisms. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debia...

Debian DSA-1951-1 : firefox-sage - insufficient input sanitising

It was discovered that firefox-sage, a lightweight RSS and Atom feed reader for Firefox, does not sanitise the RSS feed information correctly, which makes it prone to a cross-site scripting and a cross-domain scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Debian DSA-1932-1 : pidgin - programming error

It was discovered that incorrect pointer handling in the purple library, an internal component of the multi-protocol instant messaging client Pidgin, could lead to denial of service or the execution of arbitrary code through malformed contact requests. %NASLMINLEVEL 70300 C Tenable Network...

ldap-rootdse NSE Script

Retrieves the LDAP root DSA-specific Entry DSE Example Usage nmap -p 389 --script ldap-rootdse Script Output PORT STATE SERVICE 389/tcp open ldap | ldap-rootdse: | currentTime: 20100112092616.0Z | subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,DC=cqure,DC=net | dsServiceName: CN=NTDS...

Debian Security Advisory DSA 1993-1 (otrs2)

The remote host is missing an update to otrs2 announced via advisory DSA 1993-1. OpenVAS Vulnerability Test $Id: deb19931.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1993-1 otrs2 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1987-1 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1987-1. OpenVAS Vulnerability Test $Id: deb19871.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1987-1 lighttpd Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1841-2 (git-core)

The remote host is missing an update to git-core announced via advisory DSA 1841-2. OpenVAS Vulnerability Test $Id: deb18412.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1841-2 git-core Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1991-1 (squid/squid3)

The remote host is missing an update to squid/squid3 announced via advisory DSA 1991-1. OpenVAS Vulnerability Test $Id: deb19911.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1991-1 squid/squid3 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft In...

Debian Security Advisory DSA 1992-1 (chrony)

The remote host is missing an update to chrony announced via advisory DSA 1992-1. OpenVAS Vulnerability Test $Id: deb19921.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1992-1 chrony Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-1986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1987-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hybserv2 :help命令远程拒绝服务漏洞

BUGTRAQ ID: 38006 CVE ID: CVE-2010-0303 Hybserv2是改进版的Hybserv IRC服务器，可提供即时会话服务。 Hybserv2的mystring.c文件中存在拒绝服务漏洞，远程用户可以通过向MemoServ服务发送包含有help \t选项的私人消息导致守护程序崩溃。 Hybserv2 Hybserv2 1.9.4 Hybserv2 Hybserv2 1.9.3 Hybserv2 Hybserv2 1.9.2 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1982-1）以及相应补丁:...

maildrop 2.3.0本地权限提升漏洞

CVE ID: CVE-2010-0301 maildrop是带有过滤功能的邮件传输代理。 如果root用户以-d选项运行maildrop，则main.C使用了root的gid执行用户主目录中的.mailfilter，这允许本地用户通过特制文件获得权限提升。成功攻击要求maildrop编译为没有设置RESETGID，如邮件目录没有使用粘着位。 Double Precision Inc. maildrop 2.3.0 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1981-1）以及相应补丁: DSA-1981-1：New maildrop...

[SECURITY] [DSA-1990-2] New trac-git package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1990-2 [email protected] http://www.debian.org/security/ Stefan Fritsch February 04, 2010 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1974-1 (gzip)

The remote host is missing an update to gzip announced via advisory DSA 1974-1. OpenVAS Vulnerability Test $Id: deb19741.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1974-1 gzip Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1981-1 (maildrop)

The remote host is missing an update to maildrop announced via advisory DSA 1981-1. OpenVAS Vulnerability Test $Id: deb19811.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1981-1 maildrop Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1981-2 (maildrop)

The remote host is missing an update to maildrop announced via advisory DSA 1981-2. OpenVAS Vulnerability Test $Id: deb19812.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1981-2 maildrop Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-1974-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...