UPDATE: [ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability

Gentoo Linux Security Advisory UPDATE GLSA 200506-17:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

GLSA-200507-01 : PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200507-01 PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability James Bercegay of GulfTech Security Research discovered that the PEAR XML-RPC and phpxmlrpc libraries fail to sanatize input sent using the 'POST' method. Impac...

GLSA-200506-23 : Clam AntiVirus: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-23 Clam AntiVirus: Denial of Service vulnerability Andrew Toller and Stefan Kanthak discovered that a flaw in libmspack's Quantum archive decompressor renders Clam AntiVirus vulnerable to a Denial of Service attack. Impact ...

GLSA-200506-21 : Trac: File upload vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-21 Trac: File upload vulnerability Stefan Esser of the Hardened-PHP project discovered that Trac fails to validate the 'id' parameter when uploading attachments to the wiki or the bug tracking system. Impact : A remote...

GLSA-200506-18 : Tor: Information disclosure

The remote host is affected by the vulnerability described in GLSA-200506-18 Tor: Information disclosure A bug in Tor allows attackers to view arbitrary memory contents from an exit server's process space. Impact : A remote attacker could exploit the memory disclosure to gain sensitive informatio...

GLSA-200506-14 : Sun and Blackdown Java: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200506-14 Sun and Blackdown Java: Applet privilege escalation Both Sun's and Blackdown's JDK and JRE may allow untrusted applets to elevate privileges. Impact : A remote attacker could embed a malicious Java applet in a web page a...

GLSA-200506-09 : gedit: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200506-09 gedit: Format string vulnerability A format string vulnerability exists when opening files with names containing format specifiers. Impact : A specially crafted file with format specifiers in the filename can cause...

GLSA-200506-08 : GNU shtool, ocaml-mysql: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200506-08 GNU shtool, ocaml-mysql: Insecure temporary file creation Eric Romang has discovered that GNU shtool insecurely creates temporary files with predictable filenames CAN-2005-1751. On closer inspection, Gentoo Security...

GLSA-200505-16 : ImageMagick, GraphicsMagick: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200505-16 ImageMagick, GraphicsMagick: Denial of Service vulnerability Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a Denial of Service vulnerability in the XWD decoder of ImageMagick and GraphicsMagick when...

GLSA-200505-17 : Qpopper: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200505-17 Qpopper: Multiple Vulnerabilities Jens Steube discovered that Qpopper doesn't drop privileges to process local files from normal users CAN-2005-1151. The upstream developers discovered that Qpopper can be forced to creat...

GLSA-200505-15 : gdb: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200505-15 gdb: Multiple vulnerabilities Tavis Ormandy of the Gentoo Linux Security Audit Team discovered an integer overflow in the BFD library, resulting in a heap overflow. A review also showed that by default, gdb insecurely...

GLSA-200505-08 : HT Editor: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200505-08 HT Editor: Multiple buffer overflows Tavis Ormandy of the Gentoo Linux Security Team discovered an integer overflow in the ELF parser, leading to a heap-based buffer overflow. The vendor has reported that an unrelated...

GLSA-200505-07 : libTIFF: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200505-07 libTIFF: Buffer overflow Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a stack based buffer overflow in the libTIFF library when reading a TIFF image with a malformed BitsPerSample tag. Impact :...

GLSA-200504-29 : Pound: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200504-29 Pound: Buffer overflow vulnerability Steven Van Acker has discovered a buffer overflow vulnerability in the 'addport' function in Pound. Impact : A remote attacker could send a request for an overly long hostname...

[Full-disclosure] [ GLSA 200504-30 ] phpMyAdmin: Insecure SQL script installation

Gentoo Linux Security Advisory GLSA 200504-30 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200504-26 : Convert-UUlib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200504-26 Convert-UUlib: Buffer overflow A vulnerability has been reported in Convert-UUlib where a malformed parameter can be provided by an attacker allowing a read operation to overflow a buffer. The vendor credits Mark Martine...

GLSA-200504-23 : Kommander: Insecure remote script execution

The remote host is affected by the vulnerability described in GLSA-200504-23 Kommander: Insecure remote script execution Kommander executes data files from possibly untrusted locations without user confirmation. Impact : An attacker could exploit this to execute arbitrary code with the permission...

GLSA-200504-13 : OpenOffice.Org: DOC document Heap Overflow

The remote host is affected by the vulnerability described in GLSA-200504-13 OpenOffice.Org: DOC document Heap Overflow AD-LAB has discovered a heap overflow in the 'StgCompObjStream::Load' function when processing DOC documents. Impact : An attacker could design a malicious DOC document containi...

GLSA-200504-07 : GnomeVFS, libcdaudio: CDDB response overflow

The remote host is affected by the vulnerability described in GLSA-200504-07 GnomeVFS, libcdaudio: CDDB response overflow Joseph VanAndel has discovered a buffer overflow in Grip when processing large CDDB results see GLSA 200503-21. The same overflow is present in GnomeVFS and libcdaudio code...

GLSA-200503-22 : KDE: Local Denial of Service

The remote host is affected by the vulnerability described in GLSA-200503-22 KDE: Local Denial of Service Sebastian Krahmer discovered that it is possible to stall the dcopserver of other users. Impact : An attacker could exploit this to cause a local Denial of Service by stalling the dcopserver ...