GLSA-200711-20 : Pioneers: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200711-20 Pioneers: Multiple Denials of Service Roland Clobus discovered that the Pioneers server may free sessions objects while they are still in use, resulting in access to invalid memory zones CVE-2007-5933. Bas Wijnen...

GLSA-200711-18 : Cpio: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200711-18 Cpio: Buffer overflow A buffer overflow vulnerability in the safernamesuffix function in GNU cpio has been discovered. Impact : A remote attacker could entice a user to open a specially crafted archive file resulting in ...

TikiWiki: Multiple vulnerabilities

Background TikiWiki is an open source content management system written in PHP. Description Stefan Esser reported that a previous vulnerability CVE-2007-5423, GLSA 200710-21 was not properly fixed in TikiWiki 1.9.8.1 CVE-2007-5682. The TikiWiki development team also added several checks to avoid...

GLSA-200711-13 : 3proxy: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-13 3proxy: Denial of Service 3proxy contains a double free vulnerability in the ftpprchild function, which frees param-hostname and calls the parsehostname function, which in turn attempts to free param-hostname again. Impa...

GLSA-200710-29 : Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200710-29 Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code Ulf Harnhammar from Secunia Research discovered a format string error in the incputerror function in file src/inc.c. Impact : A remote attacker could...

GLSA-200710-23 : Star: Directory traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200710-23 Star: Directory traversal vulnerability Robert Buchholz of the Gentoo Security team discovered a directory traversal vulnerability in the hasdotdot function which does not identify //.. slash slash dot dot sequences in...

GLSA-200710-21 : TikiWiki: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-200710-21 TikiWiki: Arbitrary command execution ShAnKaR reported that input passed to the 'f' array parameter in tiki-graphformula.php is not properly verified before being used to execute PHP functions. Impact : An attacker could...

GLSA-200710-24 : OpenOffice.org: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-24 OpenOffice.org: Heap-based buffer overflow iDefense Labs reported that the TIFF parsing code uses untrusted values to calculate buffer sizes, which can lead to an integer overflow resulting in heap-based buffer overflow...

GLSA-200710-12 : T1Lib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-12 T1Lib: Buffer overflow Hamid Ebadi discovered a boundary error in the intT1EnvGetCompletePath function which can lead to a buffer overflow when processing an overly long filename. Impact : A remote attacker could entice ...

GLSA-200710-08 : KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-08 KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow KPDF includes code from xpdf that is vulnerable to an integer overflow in the StreamPredictor::StreamPredictor function. Impact : A remote attacke...

GLSA-200710-09 : NX 2.1: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200710-09 NX 2.1: User-assisted execution of arbitrary code Chris Evans reported an integer overflow within the FreeType PCF font file parser CVE-2006-1861. NX and NX Node are vulnerable to this due to shipping XFree86 4.3.0, whic...

GLSA-200710-05 : QGit: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200710-05 QGit: Insecure temporary file creation Raphael Marichez discovered that the DataLoader::doStart method creates temporary files in an insecure manner and executes them. Impact : A local attacker could perform a symlink...

GLSA-200709-16 : Lighttpd: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200709-16 Lighttpd: Buffer overflow Mattias Bengtsson and Philip Olausson have discovered a buffer overflow vulnerability in the function fcgienvadd in the file modfastcgi.c when processing overly long HTTP headers. Impact : A...

GLSA-200709-13 : rsync: Two buffer overflows

The remote host is affected by the vulnerability described in GLSA-200709-13 rsync: Two buffer overflows Sebastian Krahmer from the SUSE Security Team discovered two off-by-one errors in the function 'fname' in file sender.c when processing overly long directory names. Impact : A remote attacker...

GLSA-200709-04 : po4a: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200709-04 po4a: Insecure temporary file creation The po4a development team reported a race condition in the gettextize function when creating the file '/tmp/gettextization.failed.po'. Impact : A local attacker could perform a...

GLSA-200709-06 : flac123: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200709-06 flac123: Buffer overflow A possible buffer overflow vulnerability has been reported in the localvcentryparsevalue function in vorbiscomment.c. Impact : An attacker could entice a user to play a specially crafted audio...

GLSA-200709-03 : Streamripper: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200709-03 Streamripper: Buffer overflow Chris Rohlf discovered several boundary errors in the httplibparsescheader function when processing HTTP headers. Impact : A remote attacker could entice a user to connect to a malicious...

GLSA-200708-16 : Qt: Multiple format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-16 Qt: Multiple format string vulnerabilities Tim Brown of Portcullis Computer Security Ltd and Dirk Mueller of KDE reported multiple format string errors in qWarning calls in files qtextedit.cpp, qdatatable.cpp,...

GLSA-200708-10 : MySQL: Denial of Service and information leakage

The remote host is affected by the vulnerability described in GLSA-200708-10 MySQL: Denial of Service and information leakage Dormando reported a vulnerability within the handling of password packets in the connection protocol CVE-2007-3780. Andrei Elkin also found that the 'CREATE TABLE LIKE'...

GLSA-200707-07 : MPlayer: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200707-07 MPlayer: Multiple buffer overflows Stefan Cornelius and Reimar Doffinger of Secunia Research discovered several boundary errors in the functions cddbqueryparse, cddbparsematcheslist and cddbreadparse, each allowing for a...