GLSA-200502-18 : VMware Workstation: Untrusted library search path

The remote host is affected by the vulnerability described in GLSA-200502-18 VMware Workstation: Untrusted library search path Tavis Ormandy of the Gentoo Linux Security Audit Team has discovered that VMware Workstation searches for gdk-pixbuf loadable modules in an untrusted, world-writable...

USN-79-1: PostgreSQL vulnerabilities

The execution of custom PostgreSQL functions can be restricted with the EXECUTE privilege. However, previous versions did not check this privilege when executing a function which was part of an aggregate. As a result, any database user could circumvent the EXECUTE restriction of functions with a...

USN-68-1: enscript vulnerabilities

Erik Sjölund discovered several vulnerabilities in enscript which could cause arbitrary code execution with the privileges of the user calling enscript. Quotes and other shell escape characters in titles and file names were not handled in previous versions. CAN-2004-1184 Previous versions support...

USN-25-1: libgd2 vulnerability

CAN-2004-0990 described several more buffer overflows which had been discovered in libgd2's PNG handling functions. However, it was determined that the update from USN-11-1 was not sufficient to prevent every possible attack, so another update is required. If an attacker tricked a user into loadi...

Tower Toppler 0.99.1 - 'Display' Local Buffer Overflow

source: https://www.securityfocus.com/bid/7028/info It has been reported that a buffer overflow exists in Tower Toppler. A local user may be able to exploit this issue to execute code with the privileges of the toppler program. !/usr/bin/perl [email protected] playing a game hi bob $len = 1024;...

[Global InterSec 2002012101] DeleGate Application Proxy - Multiple Vulnerabilities

-------------------------------------------------------------------------- Global InterSec LLC http://www.globalintersec.com -------------------------------------------------------------------------- GIS Advisory ID: 2002012101 Changed: 07/02/2002 Author: [email protected] Reference:...

Microsoft Visual Studio VB-TSQL debugger object vbsdicli.exe contains buffer overflow via NewSPID method

Overview A vulnerability in an object included with Visual Studio 6.0 Enterprise Edition may allow an attacker to execute code with the privileges of an interactively logged in user. Description The VB-TSQL debugger object included in Visual Studio 6.0 Enterprise Edition contains a buffer overflo...