GLSA-200606-24 : wv2: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200606-24 wv2: Integer overflow A boundary checking error was found in wv2, which could lead to an integer overflow. Impact : An attacker could execute arbitrary code with the rights of the user running the program that uses the...

GLSA-200606-16 : DokuWiki: PHP code injection

The remote host is affected by the vulnerability described in GLSA-200606-16 DokuWiki: PHP code injection Stefan Esser discovered that the DokuWiki spell checker fails to properly sanitize PHP's 'complex curly syntax'. Impact : A unauthenticated remote attacker may execute arbitrary PHP commands ...

GLSA-200606-11 : JPEG library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200606-11 JPEG library: Denial of Service Tavis Ormandy of the Gentoo Linux Auditing Team discovered that the vulnerable JPEG library ebuilds compile JPEG without the --maxmem feature which is not recommended. Impact : By enticing...

GLSA-200606-10 : Cscope: Many buffer overflows

The remote host is affected by the vulnerability described in GLSA-200606-10 Cscope: Many buffer overflows Cscope does not verify the length of file names sourced in include statements. Impact : A user could be enticed to source a carefully crafted file which will allow the attacker to execute...

GLSA-200606-18 : PAM-MySQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200606-18 PAM-MySQL: Multiple vulnerabilities A flaw in handling the result of pamgetitem as well as further unspecified flaws were discovered in PAM-MySQL. Impact : By exploiting the mentioned flaws an attacker can cause a Denial...

GLSA-200606-05 : Pound: HTTP request smuggling

The remote host is affected by the vulnerability described in GLSA-200606-05 Pound: HTTP request smuggling Pound fails to handle HTTP requests with conflicting 'Content-Length' and 'Transfer-Encoding' headers correctly. Impact : An attacker could exploit this vulnerability by sending HTTP request...

GLSA-200606-03 : Dia: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200606-03 Dia: Format string vulnerabilities KaDaL-X discovered a format string error within the handling of filenames. Hans de Goede also discovered several other format string errors in the processing of dia files. Impact : By...

GLSA-200606-02 : shadow: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200606-02 shadow: Privilege escalation When the mailbox is created in useradd, the 'open' function does not receive the three arguments it expects while OCREAT is present, which leads to random permissions on the created file,...

GLSA-200605-07 : Nagios: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200605-07 Nagios: Buffer overflow Sebastian Krahmer of the SuSE security team discovered a buffer overflow vulnerability in the handling of a negative HTTP Content-Length header. Impact : A buffer overflow in Nagios CGI scripts...

GLSA-200605-06 : Mozilla Firefox: Potential remote code execution

The remote host is affected by the vulnerability described in GLSA-200605-06 Mozilla Firefox: Potential remote code execution Martijn Wargers and Nick Mott discovered a vulnerability when rendering malformed JavaScript content. The Mozilla Firefox 1.0 line is not affected. Impact : If JavaScript ...

GLSA-200605-12 : Quake 3 engine based games: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200605-12 Quake 3 engine based games: Buffer Overflow landser discovered a vulnerability within the 'remapShader' command. Due to a boundary handling error in 'remapShader', there is a possibility of a buffer overflow. Impact : An...

GLSA-200604-16 : xine-lib: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200604-16 xine-lib: Buffer overflow vulnerability Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the input data supplied by the user before copying it to an...

GLSA-200604-13 : fbida: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200604-13 fbida: Insecure temporary file creation Jan Braun has discovered that the 'fbgs' script provided by fbida insecurely creates temporary files in the '/var/tmp' directory. Impact : A local attacker could create links in th...

GLSA-200604-08 : libapreq2: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200604-08 libapreq2: Denial of Service vulnerability A vulnerability has been reported in the apreqparseheaders and apreqparseurlencoded functions of Apache2::Request. Impact : A remote attacker could possibly exploit the...

GLSA-200604-04 : Kaffeine: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200604-04 Kaffeine: Buffer overflow Kaffeine uses an unchecked buffer when fetching remote RAM playlists via HTTP. Impact : A remote attacker could entice a user to play a specially crafted RAM playlist resulting in the execution ...

GLSA-200604-02 : Horde Application Framework: Remote code execution

The remote host is affected by the vulnerability described in GLSA-200604-02 Horde Application Framework: Remote code execution Jan Schneider of the Horde team discovered a vulnerability in the help viewer of the Horde Application Framework that could allow remote code execution CVE-2006-1491. Pa...

GLSA-200603-26 : bsd-games: Local privilege escalation in tetris-bsd

The remote host is affected by the vulnerability described in GLSA-200603-26 bsd-games: Local privilege escalation in tetris-bsd Tavis Ormandy of the Gentoo Linux Security Audit Team discovered that the checkscores function in scores.c reads in the data from the /var/games/tetris-bsd.scores file...

GLSA-200603-13 : PEAR-Auth: Potential authentication bypass

The remote host is affected by the vulnerability described in GLSA-200603-13 PEAR-Auth: Potential authentication bypass Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact : A remote attacker could possibly exploit this vulnerabili...

GLSA-200603-14 : Heimdal: rshd privilege escalation

The remote host is affected by the vulnerability described in GLSA-200603-14 Heimdal: rshd privilege escalation An unspecified privilege escalation vulnerability in the rshd server of Heimdal has been reported. Impact : Authenticated users could exploit the vulnerability to escalate privileges or...

GLSA-200603-11 : Freeciv: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200603-11 Freeciv: Denial of Service Luigi Auriemma discovered that Freeciv could be tricked into the allocation of enormous chunks of memory when trying to uncompress malformed data packages, possibly leading to an out of memory...