Debian DSA-115-1 : php - broken boundary check and more

Stefan Esser, who is also a member of the PHP team, found several flawsin the way PHP handles multipart/form-data POST requests as described in RFC1867 known as POST fileuploads. Each of the flaws could allow an attacker to execute arbitrary code on the victim's system. For PHP3 flaws contain a...

[slackware-security] GTK+ image loading flaws

New GTK+ version 2 packages are available for Slackware 10.0 and -current to fix issues in the image loader routines that can crash applications. Here are the details from the Slackware 10.0 ChangeLog: l/gtk+2-2.4.10-i486-1.tgz: Upgraded to gtk+-2.4.10. This fixes security issues in the image...

GLSA-200409-28 : GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200409-28 GTK+ 2, gdk-pixbuf: Multiple image decoding vulnerabilities A vulnerability has been discovered in the BMP image preprocessor CAN-2004-0753. Furthermore, Chris Evans found a possible integer overflow in the...

TUTOS < 1.2 Multiple Input Validation Vulnerabilities

The remote host is running Tutos, an open source team organization software package written in PHP. The remote version of this software is vulnerable to multiple input validation flaws that could allow an authenticated user to perform a cross-site scripting attack or a SQL injection against the...

CESA-2004-004: libXpm

CESA-2004-003 - rev 2 http://scary.beasts.org/security/CESA-2004-003.txt libXpm multiple image parsing flaws =================================== Programs affected: libXpm, and any programs which use libXpm to decode XPM files. For example, the GIMP seems to use libXpm. Severity: Compromise of...

Important: Red Hat Security Advisory: imlib security update

An updated imlib package that fixes several heap overflows is now available. Imlib is an image loading and rendering library. Several heap overflow flaws were found in the imlib BMP image handler. An attacker could create a carefully crafted BMP file in such a way that it could cause an applicati...

RHEL 2.1 / 3 : gdk-pixbuf (RHSA-2004:447)

Updated gdk-pixbuf packages that fix several security flaws are now available. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. Updated 15th September 2004 Packages have been updated to correct a bug which caused the xpm loader to fail. During...

RHEL 3 : gtk2 (RHSA-2004:466)

Updated gtk2 packages that fix several security flaws and bugs are now available. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window System. During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the...

OpenCA Multiple Signature Validation Bypass

The remote host seems to be running an older version of OpenCA. It is reported that OpenCA versions up to and incluing 0.9.1.3 contains multiple flaws that may allow revoked or expired certificates to be accepted as valid. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

GLSA-200404-01 : Insecure sandbox temporary lockfile vulnerabilities in Portage

The remote host is affected by the vulnerability described in GLSA-200404-01 Insecure sandbox temporary lockfile vulnerabilities in Portage A flaw in Portage's sandbox wrapper has been found where the temporary lockfiles are subject to a hard-link attack which allows linkable files to be...

Dynix Webpac Input Validation

Package: Epixtech / Dynix Webpac Date: 23/08/2004 Problem Class: Input validation Advisory: Wil Allsopp Email: [email protected] Vendor status: Informed but unresponsive Description ----------- Webpac is a widely deployed library solutions system search google for webpac that allows...

Fedora Core 2 : qt-3.3.3-0.1 (2004-271)

During a security audit, Chris Evans discovered a heap overflow in the BMP image decoder in Qt versions prior to 3.3.3. An attacker could create a carefully crafted BMP file in such a way that it would cause an application linked with Qt to crash or possibly execute arbitrary code when the file w...

Qt: Image loader overflows

Background Qt is a cross-platform GUI toolkit used by KDE. Description There are several unspecified bugs in the QImage class which may cause crashes or allow execution of arbitrary code as the user running the Qt application. These bugs affect the PNG, XPM, BMP, GIF and JPEG image types. Impact ...

ttawebtop.cgi Multiple Vulnerabilities

Binary data 1685.prm...

Cfengine CAUTH Command Remote Format String

Cfengine is running on this remote host. Cfengine contains a component, cfd, which serves as a remote-configuration client to cfengine. This version of cfd contains several flaws in the way that it calls syslog. As a result, trusted hosts and valid users if access controls are not in place can...

Critical: Red Hat Security Advisory: Netscape security update

Netscape Navigator and Netscape Communicator 4.8 as distributed with Red Hat Enterprise Linux 2.1 contain security flaws and should not be used. Netscape Navigator and Netscape Communicator have been removed from the Red Hat Enterprise Linux 2.1 CD-ROM distribution as part of Update 5. These...

DEBIAN-CVE-2004-0232

Multiple format string vulnerabilities in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...

OrangeHRM < 2.4.2 Multiple Vulnerabilities

Binary data 5005.prm...

Mozilla Firefox 1.5.x < 1.5.0.3 Multiple Vulnerabilities

Binary data 3531.prm...

RHEL 2.1 : kernel (RHSA-2004:418)

Updated kernel packages that fix potential information leaks and a incorrect driver permission for Red Hat Enterprise Linux 2.1 are now available. The Linux kernel handles the basic functions of the operating system. Paul Starzetz discovered flaws in the Linux kernel when handling file offset...