Debian DSA-1729-1 : gst-plugins-bad0.10 - several vulnerabilities

Several vulnerabilities have been found in gst-plugins-bad0.10, a collection of various GStreamer plugins. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0386 Tobias Klein discovered a buffer overflow in the quicktime stream demuxer qtdemux, which...

[SECURITY] [DSA 1730-1] New proftpd-dfsg packages fix SQL injection vulnerabilites

------------------------------------------------------------------------ Debian Security Advisory DSA-1730-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1729-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 02, 2009 http://www.debian.org/security/faq -...

Fedora Core 10 FEDORA-2009-2090 (perl-Crypt-OpenSSL-DSA)

The remote host is missing an update to perl-Crypt-OpenSSL-DSA announced via advisory FEDORA-2009-2090. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

[SECURITY] Fedora 10 Update: perl-Crypt-OpenSSL-DSA-0.13-12.fc10

Crypt::OpenSSL::DSA - Digital Signature Algorithm using OpenSSL...

Fedora Core 9 FEDORA-2009-1914 (perl-Crypt-OpenSSL-DSA)

The remote host is missing an update to perl-Crypt-OpenSSL-DSA announced via advisory FEDORA-2009-1914. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora 9 : perl-Crypt-OpenSSL-DSA-0.13-9.fc9 (2009-1914)

Fixes CVE-2009-0129: The Crypto::OpenSSL::DSA module now croaks upon error rather than returning a -1 to ensure programmers are not caught by surprise which only checking for non-zero results. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

[SECURITY] Fedora 9 Update: perl-Crypt-OpenSSL-DSA-0.13-9.fc9

Crypt::OpenSSL::DSA - Digital Signature Algorithm using OpenSSL...

Debian DSA-1725-1 : websvn - programming error

Bas van Schaik discovered that WebSVN, a tool to view Subversion repositories over the web, did not properly restrict access to private repositories, allowing a remote attacker to read significant parts of their content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

Debian DSA-1724-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in Moodle, an online course management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0500 It was discovered that the information stored in the log tables was not properly sanitized, which could...

Debian Security Advisory DSA 1721-1 (libpam-krb5)

The remote host is missing an update to libpam-krb5 announced via advisory DSA 1721-1. OpenVAS Vulnerability Test $Id: deb17211.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1721-1 libpam-krb5 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1719-1 (gnutls13)

The remote host is missing an update to gnutls13 announced via advisory DSA 1719-1. OpenVAS Vulnerability Test $Id: deb17191.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1719-1 gnutls13 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

GLSA-200902-02 : OpenSSL: Certificate validation error

The remote host is affected by the vulnerability described in GLSA-200902-02 OpenSSL: Certificate validation error The Google Security Team reported that several functions incorrectly check the result after calling the EVPVerifyFinal function, allowing a malformed signature to be treated as a goo...

Debian DSA-1721-1 : libpam-krb5 - several vulnerabilities

Several local vulnerabilities have been discovered in the PAM module for MIT Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0360 Russ Allbery discovered that the Kerberos PAM module parsed configuration settings from environment variables...

Debian: Security Advisory (DSA-1722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1718-1 (boinc)

The remote host is missing an update to boinc announced via advisory DSA 1718-1. OpenVAS Vulnerability Test $Id: deb17181.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1718-1 boinc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

OpenSSL / ntp / bind / boinc certificate validation cryptographic vulnerabilities

Multiple vulnerabilities in SSL/TLS DSA/ECDSA certificate chain validations...

Debian Security Advisory DSA 1717-1 (devil)

The remote host is missing an update to devil announced via advisory DSA 1717-1. OpenVAS Vulnerability Test $Id: deb17171.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1717-1 devil Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1717-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1718-1 : boinc - incorrect API usage

It was discovered that the core client for the BOINC distributed computing infrastructure performs incorrect validation of the return values of OpenSSL's RSA functions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...