9548 matches found
Debian DSA-227-1 : openldap2 - buffer overflows and other bugs
The SuSE Security Team reviewed critical parts of openldap2, an implementation of the Lightweight Directory Access Protocol LDAP version 2 and 3, and found several buffer overflows and other bugs remote attackers could exploit to gain access on systems running vulnerable LDAP servers. In addition...
Debian DSA-378-1 : mah-jong - buffer overflows, denial of service
Nicolas Boullis discovered two vulnerabilities in mah-jong, a network-enabled game. - CAN-2003-0705 buffer overflow This vulnerability could be exploited by a remote attacker to execute arbitrary code with the privileges of the user running the mah-jong server. - CAN-2003-0706 denial of service...
Debian DSA-440-1 : linux-kernel-2.4.17-powerpc-apus - several vulnerabilities
Several local root exploits have been discovered recently in the Linux kernel. This security advisory updates the PowerPC/Apus kernel for Debian GNU/Linux. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update : - CAN-2003-0961 : An...
Debian DSA-418-1 : vbox3 - privilege leak
A bug was discovered in vbox3, a voice response system for isdn4linux, whereby root privileges were not properly relinquished before executing a user-supplied tcl script. By exploiting this vulnerability, a local user could gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Debian DSA-138-1 : gallery - remote exploit
A problem was found in gallery a web-based photo album toolkit: it was possible to pass in the GALLERYBASEDIR variable remotely. This made it possible to execute commands under the uid of web-server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian DSA-527-1 : pavuk - buffer overflow
Ulf Harnhammar discovered a vulnerability in pavuk, a file retrieval program, whereby an oversized HTTP 305 response sent by a malicious server could cause arbitrary code to be executed with the privileges of the pavuk process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
Debian DSA-182-1 : kdegraphics - buffer overflow
Zen-parse discovered a buffer overflow in gv, a PostScript and PDF viewer for X11. The same code is present in kghostview which is part of the KDE-Graphics package. This problem is triggered by scanning the PostScript file and can be exploited by an attacker sending a malformed PostScript or PDF...
Debian DSA-118-1 : xsane - insecure temporary files
Tim Waugh found several insecure uses of temporary files in the xsane program, which is used for scanning. This was fixed for Debian/stable by moving those files into a securely created directory within the /tmp directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
Debian DSA-104-1 : cipe - DoS attack
Larry McVoy found a bug in the packet handling code for the CIPE VPN package: it did not check if a received packet was too short and could crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Adviso...
Debian DSA-128-1 : sudo - buffer overflow
fc found a buffer overflow in the variable expansion code used by sudo for its prompt. Since sudo is necessarily installed suid root a local user can use this to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Debian DSA-060-1 : fetchmail - buffer overflow
Wolfram Kleff found a problem in fetchmail: it would crash when processing emails with extremely long headers. The problem was a buffer overflow in the header parser which could be exploited. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
Debian DSA-012-1 : micq - remote buffer overflow
PkC has reported that there is a buffer overflow in sprintf in micq versions 0.4.6 and previous, that allows to a remote attacker able to sniff packets to the ICQ server to execute arbitrary code on the victim system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Debian DSA-451-1 : xboing - buffer overflows
Steve Kemp discovered a number of buffer overflow vulnerabilities in xboing, a game, which could be exploited by a local attacker to gain gid 'games'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
Debian DSA-219-1 : dhcpcd - remote command execution
Simon Kelly discovered a vulnerability in dhcpcd, an RFC2131 and RFC1541 compliant DHCP client daemon, that runs with root privileges on client machines. A malicious administrator of the regular or an untrusted DHCP server may execute any command with root privileges on the DHCP client machine by...
Debian DSA-348-1 : traceroute-nanog - integer overflow, buffer overflow
traceroute-nanog, an enhanced version of the common traceroute program, contains an integer overflow bug which could be exploited to execute arbitrary code. traceroute-nanog is setuid root, but drops root privileges immediately after obtaining raw ICMP and raw IP sockets. Thus, exploitation of th...
Debian DSA-220-1 : squirrelmail - XSS
A cross site scripting vulnerability has been discovered in squirrelmail, a feature-rich webmail package written in PHP4. Squirrelmail doesn't sanitize user provided variables in all places, leaving it vulnerable to a cross site scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security, In...
gnutls -- certificate chain verification DoS
Patric Hornik reports on a problem in the certificate chain verification procedures of GnuTLS that may result in a denial-of-service vulnerability: The certificate chain should be verified from last root certificate to the first certificate. Otherwise a lot of unauthorized CPU processing can be...
CVE-2004-2131
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server IDS 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable...
