Debian Security Advisory DSA 840-1 (drupal)

The remote host is missing an update to drupal announced via advisory DSA 840-1. Stefan Esser of the Hardened-PHP Project reported a serious vulnerability in the third-party XML-RPC library included with some Drupal versions. An attacker could execute arbitrary PHP code on a target site. This...

Debian Security Advisory DSA 750-1 (dhcpcd)

The remote host is missing an update to dhcpcd announced via advisory DSA 750-1. infamous42md discovered that dhcpcd, a DHCP client for automatically configuring IPv4 networking, can be tricked into reading past the end of the supplied DHCP buffer which could lead to the daemon crashing. The old...

Debian Security Advisory DSA 1016-1 (evolution)

The remote host is missing an update to evolution announced via advisory DSA 1016-1. Ulf Härnhammar discovered several format string vulnerabilities in Evolution, a free groupware suite, that could lead to crashes of the application or the execution of arbitrary code. For the old stable...

Debian Security Advisory DSA 460-2 (sysstat)

The remote host is missing an update to sysstat announced via advisory DSA 460-2. OpenVAS Vulnerability Test $Id: deb4602.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 460-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 126-1 (imp)

The remote host is missing an update to imp announced via advisory DSA 126-1. OpenVAS Vulnerability Test $Id: deb1261.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 126-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1254-1 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 1254-1. It was discovered that the Bind name server daemon is vulnerable to denial of service by triggering an assertion through a crafted DNS query. This only affects installations which use the DNSSEC extensions. OpenVAS...

Debian Security Advisory DSA 382-3 (ssh)

The remote host is missing an update to ssh announced via advisory DSA 382-3. OpenVAS Vulnerability Test $Id: deb3823.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 382-3 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 382-2 (ssh)

The remote host is missing an update to ssh announced via advisory DSA 382-2. OpenVAS Vulnerability Test $Id: deb3822.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 382-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 383-1 (ssh-krb5)

The remote host is missing an update to ssh-krb5 announced via advisory DSA 383-1. OpenVAS Vulnerability Test $Id: deb3831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 383-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1130-1 (sitebar)

The remote host is missing an update to sitebar announced via advisory DSA 1130-1. A a cross-site scripting vulnerability has been discovered in sitebar, a web based bookmark manager written in PHP, which allows remote attackers to inject arbitrary web script or HTML. OpenVAS Vulnerability Test...

Debian Security Advisory DSA 882-1 (openssl095)

The remote host is missing an update to openssl095 announced via advisory DSA 882-1. OpenVAS Vulnerability Test $Id: deb8821.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 882-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1155-1 (sendmail)

The remote host is missing an update to sendmail announced via advisory DSA 1155-1. Frank Sheiness discovered that a MIME conversion routine in sendmail, a powerful, efficient, and scalable mail transport agent, could be tricked by a specially crafted mail to perform an endless recursion. OpenVAS...

Debian Security Advisory DSA 774-1 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory DSA 774-1. Edward Shornock discovered a bug in the UIDL handling code of fetchmail, a common POP3, APOP and IMAP mail fetching utility. A malicious POP3 server could exploit this problem and inject arbitrary code that will b...

Debian Security Advisory DSA 675-1 (hztty)

The remote host is missing an update to hztty announced via advisory DSA 675-1. OpenVAS Vulnerability Test $Id: deb6751.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 675-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 738-1 (razor)

The remote host is missing an update to razor announced via advisory DSA 738-1. A vulnerability was discovered in the way that Razor parses certain email headers that could potentially be used to crash the Razor program, causing a denial of service DOS. OpenVAS Vulnerability Test $Id: deb7381.nas...

Debian Security Advisory DSA 500-1 (flim)

The remote host is missing an update to flim announced via advisory DSA 500-1. OpenVAS Vulnerability Test $Id: deb5001.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 500-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 862-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 862-1. OpenVAS Vulnerability Test $Id: deb8621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 862-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 799-1 (webcalendar)

The remote host is missing an update to webcalendar announced via advisory DSA 799-1. A trivially-exploitable bug was discovered in webcalendar that allows an attacker to execute arbitrary code with the privileges of the HTTP daemon on a system running a vulnerable version. The old stable...

Debian Security Advisory DSA 991-1 (zoo)

The remote host is missing an update to zoo announced via advisory DSA 991-1. Jean-Sebastien Guay-Leroux discovered a buffer overflow in zoo, a utility to manipulate zoo archives, that could lead to the execution of arbitrary code when unpacking a specially crafted zoo archive. For the old stable...

Debian Security Advisory DSA 815-1 (kdebase)

The remote host is missing an update to kdebase announced via advisory DSA 815-1. Ilja van Sprundel discovered a serious lock file handling error in kcheckpass that can, in some configurations, be used to gain root access. The old stable distribution woody is not affected by this problem. OpenVAS...