GLSA-200511-01 : libgda: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-01 libgda: Format string vulnerabilities Steve Kemp discovered two format string vulnerabilities in the gdalogerror and gdalogmessage functions. Some applications may pass untrusted input to those functions and be vulnerabl...

GLSA-200510-19 : cURL: NTLM username stack overflow

The remote host is affected by the vulnerability described in GLSA-200510-19 cURL: NTLM username stack overflow iDEFENSE reported that insufficient bounds checking on a memcpy of the supplied NTLM username can result in a stack overflow. Impact : A remote attacker could setup a malicious server a...

GLSA-200510-12 : KOffice, KWord: RTF import buffer overflow

The remote host is affected by the vulnerability described in GLSA-200510-12 KOffice, KWord: RTF import buffer overflow Chris Evans discovered that the KWord RTF importer was vulnerable to a heap-based buffer overflow. Impact : An attacker could entice a user to open a specially crafted RTF file,...

GLSA-200510-10 : uw-imap: Remote buffer overflow

The remote host is affected by the vulnerability described in GLSA-200510-10 uw-imap: Remote buffer overflow Improper bounds checking of user-supplied data while parsing IMAP mailbox names can lead to overflowing the stack buffer. Impact : Successful exploitation requires an authenticated IMAP us...

GLSA-200510-08 : xine-lib: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200510-08 xine-lib: Format string vulnerability Ulf Harnhammar discovered a format string bug in the routines handling CDDB server response contents. Impact : An attacker could submit malicious information about an audio CD to a...

GLSA-200509-18 : Qt: Buffer overflow in the included zlib library

The remote host is affected by the vulnerability described in GLSA-200509-18 Qt: Buffer overflow in the included zlib library Qt links to a bundled vulnerable version of zlib when emerged with the zlib USE-flag disabled. This may lead to a buffer overflow. Impact : By creating a specially crafted...

GLSA-200509-04 : phpLDAPadmin: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-200509-04 phpLDAPadmin: Authentication bypass Alexander Gerasiov discovered a flaw in login.php preventing the application from validating whether anonymous bind has been disabled in the target LDAP server configuration. Impact :...

GLSA-200508-13 : PEAR XML-RPC, phpxmlrpc: New PHP script injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200508-13 PEAR XML-RPC, phpxmlrpc: New PHP script injection vulnerability Stefan Esser of the Hardened-PHP Project discovered that the PEAR XML-RPC and phpxmlrpc libraries were improperly handling XMLRPC requests and responses wit...

GLSA-200508-10 : Kismet: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200508-10 Kismet: Multiple vulnerabilities Kismet is vulnerable to a heap overflow when handling pcap captures and to an integer underflow in the CDP protocol dissector. Impact : With a specially crafted packet an attacker could...

GLSA-200508-05 : Heartbeat: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200508-05 Heartbeat: Insecure temporary file creation Eric Romang has discovered that Heartbeat insecurely creates temporary files with predictable filenames. Impact : A local attacker could create symbolic links in the temporary...

GLSA-200508-01 : Compress::Zlib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200508-01 Compress::Zlib: Buffer overflow Compress::Zlib 1.34 contains a local vulnerable version of zlib, which may lead to a buffer overflow. Impact : By creating a specially crafted compressed data stream, attackers can overwri...

GLSA-200507-28 : AMD64 x86 emulation base libraries: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200507-28 AMD64 x86 emulation base libraries: Buffer overflow Earlier versions of emul-linux-x86-baselibs contain a vulnerable version of zlib, which may lead to a buffer overflow. Impact : By creating a specially crafted compress...

GLSA-200507-18 : MediaWiki: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200507-18 MediaWiki: XSS vulnerability MediaWiki fails to escape a parameter in the page move template correctly. Impact : By enticing a user to visit a specially crafted URL, a remote attacker could exploit this vulnerability to...

GLSA-200507-15 : PHP: Script injection through XML-RPC

The remote host is affected by the vulnerability described in GLSA-200507-15 PHP: Script injection through XML-RPC James Bercegay has discovered that the XML-RPC implementation in PHP fails to sanitize input passed in an XML document, which is used in an 'eval' statement. Impact : A remote attack...

GLSA-200507-16 : dhcpcd: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200507-16 dhcpcd: Denial of Service vulnerability infamous42md discovered that dhcpcd can be tricked to read past the end of the supplied DHCP buffer. As a result, this might lead to a crash of the daemon. Impact : With a maliciou...

GLSA-200507-13 : pam_ldap and nss_ldap: Plain text authentication leak

The remote host is affected by the vulnerability described in GLSA-200507-13 pamldap and nssldap: Plain text authentication leak Rob Holland of the Gentoo Security Audit Team discovered that pamldap and nssldap fail to use TLS for referred connections if they are referred to a master after...

GLSA-200507-09 : Adobe Acrobat Reader: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200507-09 Adobe Acrobat Reader: Buffer overflow vulnerability A buffer overflow has been discovered in the UnixAppOpenFilePerform function, which is called when Adobe Acrobat Reader tries to open a file with the '\Filespec' tag...

GLSA-200507-08 : phpGroupWare, eGroupWare: PHP script injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200507-08 phpGroupWare, eGroupWare: PHP script injection vulnerability The XML-RPC implementations of phpGroupWare and eGroupWare fail to sanitize input sent to the XML-RPC server using the 'POST' method. Impact : A remote attacke...

TikiWiki: Arbitrary command execution through XML-RPC

Background TikiWiki is a web-based groupware and content management system CMS, using PHP, ADOdb and Smarty. TikiWiki includes vulnerable PHP XML-RPC code. Description TikiWiki is vulnerable to arbitrary command execution as described in GLSA 200507-01. Impact A remote attacker could exploit this...

GLSA-200507-05 : zlib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200507-05 zlib: Buffer overflow Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a buffer overflow in zlib. A bounds checking operation failed to take invalid data into account, allowing a specifically malformed...