Debian DSA-1604-1 : bind - DNS cache poisoning

Dan Kaminsky discovered that properties inherent to the DNS protocol lead to practical DNS cache poisoning attacks. Among other things, successful attacks can lead to misdirected web traffic and email rerouting. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

Debian DSA-1606-1 : poppler - programming error

It was discovered that poppler, a PDF rendering library, did not properly handle embedded fonts in PDF files, allowing attackers to execute arbitrary code via a crafted font object. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-1600-1 : sympa - dos

It was discovered that sympa, a modern mailing list manager, would crash when processing certain types of malformed messages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1600. The text...

Debian DSA-1602-1 : pcre3 - buffer overflow

Tavis Ormandy discovered that PCRE, the Perl-Compatible Regular Expression library, may encounter a heap overflow condition when compiling certain regular expressions involving in-pattern options and branches, potentially leading to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network...

PCRE pcre_compile.c文件堆溢出漏洞

CVECAN ID: CVE-2008-2371 PCRE（Perl兼容正则表达式）库是个开放源代码的软件，可提供正则表达式支持。 当PCRE在启动模式（pattern）指定选项的时候，为了防止将其不必要的编译到字节代码，会如pcrecompile选项所指定的方式传送回调用程序（也就是/?ia|b/ == /a|b/i）。如果模式包含有多个分支的话，就会意外的将新选项回传的过远，仅有第一个分支获得了新的标记，而在第二次编译传送的时候会一直设置新的标记，导致大小计算传送和实际的编译传送之间出现不匹配，这可能触发堆溢出。 PCRE 7.7 厂商补丁： Debian ------...

Debian Security Advisory DSA 1599-1 (dbus)

The remote host is missing an update to dbus announced via advisory DSA 1599-1. OpenVAS Vulnerability Test $Id: deb15991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1599-1 dbus Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1599-1 : dbus - programming error

Havoc Pennington discovered that DBus, a simple interprocess messaging system, performs insufficient validation of security policies, which might allow local privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian Security Advisory DSA 1594-1 (imlib2)

The remote host is missing an update to imlib2 announced via advisory DSA 1594-1. OpenVAS Vulnerability Test $Id: deb15941.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1594-1 imlib2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1594-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1596-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1595-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1598-1 : libtk-img - buffer overflow

It was discovered that a buffer overflow in the GIF image parsing code of Tk, a cross-platform graphical toolkit, could lead to denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian DSA-1597-2 : mt-daapd - multiple vulnerabilities

Three vulnerabilities have been discovered in the mt-daapd DAAP audio server also known as the Firefly Media Server. The Common Vulnerabilities and Exposures project identifies the following three problems : - CVE-2007-5824 Insufficient validation and bounds checking of the Authorization: HTTP...

Debian DSA-1592-1 : linux-2.6 - heap overflow

Two vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or arbitrary code execution. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1673 Wei Wang from McAfee reported a potential heap overflow in the ASN.1...

Debian DSA-1595-1 : xorg-server - several vulnerabilities

Several local vulnerabilities have been discovered in the X Window system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1377 Lack of validation of the parameters of the SProcSecurityGenerateAuthorization and SProcRecordCreateContext functions mak...

Debian DSA-1594-1 : imlib2 - buffer overflows

Stefan Cornelius discovered two buffer overflows in Imlib's - a powerful image loading and rendering library - image loaders for PNM and XPM images, which may result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

X.Org X server RENDER扩展ProcRenderCreateCursor()拒绝服务漏洞

BUGTRAQ ID: 29665 CVECAN ID: CVE-2008-2361 Xorg X Server是多个厂商操作系统中所捆绑的X窗口系统显示服务器。 X.Org X Server的RENDER扩展中的ProcRenderCreateCursor函数在解析客户端请求时直接将请求中的值用于计算动态缓冲区的大小。这个计算中可能出现整数溢出，导致分配不充分的缓冲区和访问无效内存，X Server可能会崩溃。...

Debian Security Advisory DSA 1591-1 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory DSA 1591-1. OpenVAS Vulnerability Test $Id: deb15911.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1591-1 libvorbis Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1592-2 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1592-2. OpenVAS Vulnerability Test $Id: deb15922.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1592-2 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1588-2 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1588-2. OpenVAS Vulnerability Test $Id: deb15882.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1588-2 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...