GLSA-200603-07 : flex: Potential insecure code generation

The remote host is affected by the vulnerability described in GLSA-200603-07 flex: Potential insecure code generation Chris Moore discovered a buffer overflow in a special class of lexicographical scanners generated by flex. Only scanners generated by grammars which use either REJECT, or rules wi...

GLSA-200603-01 : WordPress: SQL injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200603-01 WordPress: SQL injection vulnerability Patrik Karlsson reported that WordPress 1.5.2 makes use of an insufficiently filtered User Agent string in SQL queries related to comments posting. This vulnerability was already...

GLSA-200602-13 : GraphicsMagick: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200602-13 GraphicsMagick: Format string vulnerability The SetImageInfo function was found vulnerable to a format string mishandling. Daniel Kobras discovered that the handling of '%'-escaped sequences in filenames passed to the...

GLSA-200602-11 : OpenSSH, Dropbear: Insecure use of system() call

The remote host is affected by the vulnerability described in GLSA-200602-11 OpenSSH, Dropbear: Insecure use of system call To copy from a local filesystem to another local filesystem, scp constructs a command line using 'cp' which is then executed via system. Josh Bressers discovered that specia...

GLSA-200602-09 : BomberClone: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200602-09 BomberClone: Remote execution of arbitrary code Stefan Cornelius of the Gentoo Security team discovered multiple missing buffer checks in BomberClone's code. Impact : By sending overly long error messages to the game via...

ImageMagick: Format string vulnerability

Background ImageMagick is an application suite to manipulate and convert images. It is often used as a utility backend by web applications like forums, content management systems or picture galleries. Description The SetImageInfo function was found vulnerable to a format string mishandling. Danie...

GLSA-200601-13 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-13 Gallery: XSS vulnerability Peter Schumacher discovered that Gallery fails to sanitize the fullname set by users, possibly leading to a cross-site scripting vulnerability. Impact : By setting a specially crafted fullname,...

GLSA-200601-10 : Sun and Blackdown Java: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200601-10 Sun and Blackdown Java: Applet privilege escalation Adam Gowdiak discovered multiple vulnerabilities in the Java Runtime Environment's Reflection APIs that may allow untrusted applets to elevate privileges. Impact : A...

GLSA-200601-08 : Blender: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200601-08 Blender: Heap-based buffer overflow Damian Put has reported a flaw due to an integer overflow in the 'getbhead' function, leading to a heap overflow when processing malformed '.blend' files. Impact : A remote attacker...

GLSA-200601-09 : Wine: Windows Metafile SETABORTPROC vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-09 Wine: Windows Metafile SETABORTPROC vulnerability H D Moore discovered that Wine implements the insecure-by-design SETABORTPROC GDI Escape function for Windows Metafile WMF files. Impact : An attacker could entice a user...

GLSA-200601-01 : pinentry: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200601-01 pinentry: Local privilege escalation Tavis Ormandy of the Gentoo Linux Security Audit Team has discovered that the pinentry ebuild incorrectly sets the permissions of the pinentry binaries upon installation, so that the...

GLSA-200601-06 : xine-lib, FFmpeg: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200601-06 xine-lib, FFmpeg: Heap-based buffer overflow Simon Kilvington has reported a vulnerability in FFmpeg libavcodec. The flaw is due to a buffer overflow error in the 'avcodecdefaultgetbuffer' function. This function doesn't...

GLSA-200512-05 : Xmail: Privilege escalation through sendmail

The remote host is affected by the vulnerability described in GLSA-200512-05 Xmail: Privilege escalation through sendmail iDEFENSE reported that the AddressFromAtPtr function in the sendmail program fails to check bounds on arguments passed from other functions, and as a result an exploitable sta...

GLSA-200512-04 : Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation

The remote host is affected by the vulnerability described in GLSA-200512-04 Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation The Oulu University Secure Programming Group OUSPG discovered that various ISAKMP implementations, including Openswan and racoon included in the...

GLSA-200512-01 : Perl: Format string errors can lead to code execution

The remote host is affected by the vulnerability described in GLSA-200512-01 Perl: Format string errors can lead to code execution Jack Louis discovered a new way to exploit format string errors in Perl that could lead to the execution of arbitrary code. This is perfomed by causing an integer wra...

GLSA-200511-20 : Horde Application Framework: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200511-20 Horde Application Framework: XSS vulnerability The Horde Team reported a potential XSS vulnerability. Horde fails to properly escape error messages which may lead to displaying unsanitized error messages via...

GLSA-200511-23 : chmlib, KchmViewer: Stack-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200511-23 chmlib, KchmViewer: Stack-based buffer overflow Sven Tantau reported about a buffer overflow vulnerability in chmlib. The function 'chmdecompressblock' does not properly perform boundary checking, resulting in a...

GLSA-200511-12 : Scorched 3D: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-12 Scorched 3D: Multiple vulnerabilities Luigi Auriemma discovered multiple flaws in the Scorched 3D game server, including a format string vulnerability and several buffer overflows. Impact : A remote attacker can exploit...

GLSA-200511-14 : GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-14 GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities iDEFENSE reported a possible heap overflow in the XPM loader CVE-2005-3186. Upon further inspection, Ludwig Nussel discovered two additional issues in the XPM...

GLSA-200511-10 : RAR: Format string and buffer overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-10 RAR: Format string and buffer overflow vulnerabilities Tan Chew Keong reported about two vulnerabilities found in RAR: A format string error exists when displaying a diagnostic error message that informs the user of an...