Debian DSA-1717-1 : devil - buffer overflow

Stefan Cornelius discovered a buffer overflow in devil, a cross-platform image loading and manipulation toolkit, which could be triggered via a crafted Radiance RGBE file. This could potentially lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CentOS 3 / 4 / 5 : bind (CESA-2009:0020)

Updated Bind packages to correct a security issue are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name...

Debian Security Advisory DSA 1716-1 (vnc4)

The remote host is missing an update to vnc4 announced via advisory DSA 1716-1. OpenVAS Vulnerability Test $Id: deb17161.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1716-1 vnc4 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1714-1 (rt2570)

The remote host is missing an update to rt2570 announced via advisory DSA 1714-1. OpenVAS Vulnerability Test $Id: deb17141.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1714-1 rt2570 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1710-1 (ganglia-monitor-core)

The remote host is missing an update to ganglia-monitor-core announced via advisory DSA 1710-1. OpenVAS Vulnerability Test $Id: deb17101.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1710-1 ganglia-monitor-core Authors: Thomas Reinke Copyright: Copyright ...

Debian Security Advisory DSA 1711-1 (typo3-src)

The remote host is missing an update to typo3-src announced via advisory DSA 1711-1. OpenVAS Vulnerability Test $Id: deb17111.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1711-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1716-1 : vnc4 - integer overflow

It was discovered that xvnc4viewer, a virtual network computing client software for X, is prone to an integer overflow via a malicious encoding value that could lead to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian: Security Advisory (DSA-1711-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1704-2 (netatalk)

The remote host is missing an update to netatalk announced via advisory DSA 1704-2. OpenVAS Vulnerability Test $Id: deb17042.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1704-2 netatalk Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

ntp incorrectly checks for malformed signatures

NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...

Debian DSA-1713-1 : rt2500 - integer overflow

It was discovered that an integer overflow in the 'Probe Request' packet parser of the Ralinktech wireless drivers might lead to remote denial of service or the execution of arbitrary code. Please note that you need to rebuild your driver from the source package in order to set this update into...

Debian DSA-1711-1 : typo3-src - several vulnerabilities

Several remotely exploitable vulnerabilities have been discovered in the TYPO3 web content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0255 Chris John Riley discovered that the TYPO3-wide used encryption key is generated wi...

Debian DSA-1710-1 : ganglia-monitor-core - buffer overflow

Spike Spiegel discovered a stack-based buffer overflow in gmetad, the meta-daemon for the ganglia cluster monitoring toolkit, which could be triggered via a request with long path names and might enable arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Debian: Security Advisory (DSA-1709-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1709-1 (shadow)

The remote host is missing an update to shadow announced via advisory DSA 1709-1. OpenVAS Vulnerability Test $Id: deb17091.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1709-1 shadow Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

openSUSE 10 Security Update : bind (bind-5915)

This update improves the verification of return values of openssl functions. Prior this update it was possible to spoof answers signed with DSA and NSEC3DSA. CVE-2009-0025 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

[SECURITY] [DSA 1693-2] New phppgadmin packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1693-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 21, 2009 http://www.debian.org/security/faq -...

Debian DSA-1709-1 : shadow - race condition

Paul Szabo discovered that login, the system login tool, did not correctly handle symlinks while setting up tty permissions. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...

Debian Security Advisory DSA 1705-1 (netatalk)

The remote host is missing an update to netatalk announced via advisory DSA 1705-1. OpenVAS Vulnerability Test $Id: deb17051.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1705-1 netatalk Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1707-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...