Salim Gasmi GLD 1.x Postfix Greylisting Daemon Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13129/info It is reported that GLD contains a buffer overflow vulnerability. This issue is due to a failure of the application to properly ensure that a fixed-size memory buffer is sufficiently large prior to copying...

lighttpd 1.4.31 Denial of Service PoC

No description provided by source. !/bin/bash Exploit Title: simple lighttpd 1.4.31 DOS POC Date: 11/21/2012 Exploit Author: [email protected] Vendor Homepage: http://www.lighttpd.net Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz Version: 1.4.31 Tested on:...

Gentoo-Specific MPG123 - URI Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18794/info The mpg123 application is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may...

GLSA-201406-30 : sudo: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201406-30 sudo: Privilege escalation When the Sudo envreset option is disabled it is enabled by default, certain environment variables are not blacklisted as expected. Impact : A local attacker, authorized to run commands using...

GLSA-201405-24 : Apache Portable Runtime, APR Utility Library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201405-24 Apache Portable Runtime, APR Utility Library: Denial of Service Multiple vulnerabilities have been discovered in Apache Portable Runtime and APR Utility Library. Please review the CVE identifiers referenced below for...

GLSA-201405-21 : Charybdis, ShadowIRCd: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201405-21 Charybdis, ShadowIRCd: Denial of Service A vulnerability has been discovered in Charybdis and ShadowIRCd. Please review the CVE identifier referenced below for details. Impact : A remote attacker may be able to cause a...

GLSA-201405-10 : Rack: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201405-10 Rack: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Rack. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

GLSA-201405-01 : udisks: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201405-01 udisks: Arbitrary code execution A stack-based buffer overflow can be triggered when udisks is given a long path name as a mount point. Impact : A local attacker could possibly execute arbitrary code with the privileges ...

GLSA-201403-03 : file: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201403-03 file: Denial of Service A flaw was found in the way the file utility determines the type of a file. Impact : A remote attacker could entice a user to open a specially crafted file, possibly resulting in a Denial of Servi...

GLSA-201402-10 : PulseAudio: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-201402-10 PulseAudio: Insecure temporary file usage The pamakesecuredir function in core-util.c does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with th...

GLSA-201402-09 : Apache mod_fcgid: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201402-09 Apache modfcgid: Arbitrary code execution Apache modfcgid fails to perform a boundary check on user-supplied input, potentially resulting in a heap-based buffer overflow. Impact : A remote attacker can supply a crafted...

GLSA-201402-11 : Links: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201402-11 Links: Denial of Service An integer overflow vulnerability was found in the parsing of HTML tables in the Links web browser when running in graphical mode. Impact : A remote attacker could possibly cause a Denial of...

GLSA-201402-02 : NVIDIA Drivers: Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-201402-02 NVIDIA Drivers: Privilege Escalation The vulnerability is caused due to the driver allowing unprivileged user-mode software to access the GPU. Impact : A local attacker could gain escalated privileges. Workaround : There...

GLSA-201401-33 : Perl Digest-Base module: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201401-33 Perl Digest-Base module: Arbitrary code execution The vulnerability is caused due to the Digest-new function not properly sanitising input before using it in an eval call. Impact : The vulnerability might allow an attack...

GLSA-201401-34 : BIND: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201401-34 BIND: Denial of Service Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to cause a Denial of Service condition...

GLSA-201401-19 : GMime: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201401-19 GMime: Arbitrary code execution GMime contains a buffer overflow flaw in the GMIMEUUENCODELEN macro in gmime/gmime-encodings.h. Impact : A context-dependent attacker could possibly execute arbitrary code or cause a Denia...

GLSA-201401-04 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201401-04 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of Servic...

GLSA-201312-07 : OpenEXR: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-07 OpenEXR: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could execute arbitrary co...

GNU C Library: Multiple vulnerabilities

Background The GNU C library is the standard C library used by Gentoo Linux systems. Description Multiple vulnerabilities have been discovered in GNU C Library. Please review the CVE identifiers referenced below for details. Impact A local attacker could trigger vulnerabilities in dynamic library...

GLSA-201312-03 : OpenSSL: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-03 OpenSSL: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenSSL. Please review the CVE identifiers referenced below for details. Impact : Remote attackers can determine private keys, decrypt...