GLSA-200603-20 : Macromedia Flash Player: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200603-20 Macromedia Flash Player: Arbitrary code execution The Macromedia Flash Player contains multiple unspecified vulnerabilities. Impact : An attacker serving a maliciously crafted SWF file could entice a user to view the SWF...

[ GLSA 200603-12 ] zoo: Buffer overflow

Gentoo Linux Security Advisory GLSA 200603-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200603-08 : GnuPG: Incorrect signature verification

The remote host is affected by the vulnerability described in GLSA-200603-08 GnuPG: Incorrect signature verification OpenPGP is the standard that defines the format of digital signatures supported by GnuPG. OpenPGP signatures consist of multiple sections, in a strictly defined order. Tavis Ormand...

GLSA-200603-04 : IMAP Proxy: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200603-04 IMAP Proxy: Format string vulnerabilities Steve Kemp discovered two format string errors in IMAP Proxy. Impact : A remote attacker could design a malicious IMAP server and entice someone to connect to it using IMAP Proxy...

[ GLSA 200602-09 ] BomberClone: Remote execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200602-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Mozilla Firefox 1.5 (Linux) - 'location.QueryInterface()' Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Mozilla Firefox 1.5 location.QueryInterface() Code Execution (linux)

Exploit for linux platform in category remote exploits ==================================================================== Mozilla Firefox 1.5 location.QueryInterface Code Execution linux ==================================================================== This file is part of the Metasploit...

Mozilla Firefox 1.5 (Linux) - location.QueryInterface() Code Execution (Metasploit)

Mozilla Firefox 1.5 Linux - location.QueryInterface Code Execution Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license a...

GLSA-200601-16 : MyDNS: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200601-16 MyDNS: Denial of Service MyDNS contains an unspecified flaw that may allow a remote Denial of Service. Impact : An attacker could cause a Denial of Service by sending malformed DNS queries to the MyDNS server. Workaround...

GLSA-200601-11 : KDE kjs: URI heap overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-11 KDE kjs: URI heap overflow vulnerability Maksim Orlovich discovered an incorrect bounds check in kjs when handling URIs. Impact : By enticing a user to load a specially crafted webpage containing malicious JavaScript, an...

Clam AntiVirus vulnerable to memory corruption via specially crafted UPX packed file

Overview A vulnerability in the ClamAV antivirus toolkit may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Clam AntiVirus is an antivirus toolkit for Unix-like systems that is commonly integrated with mail servers for email attachment scanning. It supports ...

[ GLSA 200601-03 ] HylaFAX: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200601-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2006-0071

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

Code injection

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

CVE-2006-0071

Pinentry on Gentoo is affected by CVE-2006-0071: the pinentry ebuild before 0.7.2-r2 sets the sgid bit on pinentry binaries, allowing local users to read or overwrite files with gid 0. Affected packages include pinentry, pinentry-curses, pinentry-gtk, and pinentry-gtk. Remediation: upgrade to pin...

CVE-2006-0071

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

CVE-2006-0071

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

[ GLSA 200601-01 ] pinentry: Local privilege escalation

Gentoo Linux Security Advisory GLSA 200601-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 200512-18 ] XnView: Privilege escalation

Gentoo Linux Security Advisory GLSA 200512-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-4595

CVE-2005-4595 describes an untrusted search path (RPATH/DT_RPATH) vulnerability in XnView 1.70 and NView 4.51 on Gentoo Linux. The dynamic loader could search in untrusted directories for shared libraries, enabling a local attacker to execute arbitrary code with the privileges of the user running...