GLSA-201503-02 : D-Bus: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201503-02 D-Bus: Denial of Service D-Bus doesnt validate the source of ActivationFailure signals. Impact : A local attacker could possibly cause a Denial of Service condition. Workaround : There is no known workaround at this time...

GLSA-201502-14 : grep: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201502-14 grep: Denial of Service A heap buffer overrun has been fixed in the bmexectrans function in kwset.c. Impact : A local user can cause Denial of Service. Workaround : There is no known workaround at this time. %NASLMINLEVE...

GLSA-201502-03 : BIND: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201502-03 BIND: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : A remote attacker can cause a denial of service condition by...

GLSA-201412-45 : Facter: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201412-45 Facter: Privilege escalation Facter includes the current working directory in the search path. Impact : A local attacker may be able to gain escalated privileges. Workaround : There is no known workaround at this time...

GLSA-201412-49 : fish: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-49 fish: Multiple vulnerabilities Multiple vulnerabilities have been discovered in fish. Please review the CVE identifiers referenced below for details. Impact : A local attacker may be able to gain escalated privileges or...

GLSA-201412-50 : getmail: Information disclosure

The remote host is affected by the vulnerability described in GLSA-201412-50 getmail: Information disclosure Multiple vulnerabilities have been discovered in getmail. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause a man-in-the-middle attack...

GLSA-201412-32 : sendmail: Information disclosure

The remote host is affected by the vulnerability described in GLSA-201412-32 sendmail: Information disclosure The smcloseonexec function in conf.c has arguments in the wrong order. Impact : A local attacker could get access to unintended high-numbered file descriptors via a specially crafted...

GLSA-201412-06 : libxml2: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-06 libxml2: Denial of Service parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled. Impact : A context-dependent attacker could entice a user to a...

GLSA-201412-20 : GNUstep Base library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-20 GNUstep Base library: Denial of Service GNUstep Base library does not properly handle the file descriptor for logging, when run as a daemon. Impact : A remote attacker could send a specially crafted request, possibly...

GLSA-201412-10 : Multiple packages, Multiple vulnerabilities fixed in 2012

The remote host is affected by the vulnerability described in GLSA-201412-10 Multiple packages, Multiple vulnerabilities fixed in 2012 Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. EGroupware VTE Layer Fo...

GLSA-201412-08 : Multiple packages, Multiple vulnerabilities fixed in 2010

The remote host is affected by the vulnerability described in GLSA-201412-08 Multiple packages, Multiple vulnerabilities fixed in 2010 Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. Insight Perl Tk Module...

Multiple packages, Multiple vulnerabilities fixed in 2012

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. EGroupware VTE Layer Four...

Multiple packages, Multiple vulnerabilities fixed in 2010

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. Insight Perl Tk Module...

GLSA-201412-02 : nfs-utils: Information disclosure

The remote host is affected by the vulnerability described in GLSA-201412-02 nfs-utils: Information disclosure rpc.gssd in nfs-utils is vulnerable to DNS spoofing due to it depending on PTR resolution for GSSAPI authentication, allowing for data to be submitted to a malicious server without the...

GLSA-201411-09 : Ansible: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201411-09 Ansible: Privilege escalation Multiple vulnerabilities have been discovered in Ansible. Please review the CVE identifiers referenced below for details. Impact : A local attacker could possibly execute arbitrary code with...

GLSA-201411-06 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201411-06 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

GLSA-201409-10 : Bash: Code Injection (Updated fix for GLSA 201409-09)

The remote host is affected by the vulnerability described in GLSA-201409-10 Bash: Code Injection Updated fix for GLSA 201409-09 Stephane Chazelas reported that Bash incorrectly handles function definitions, allowing attackers to inject arbitrary code CVE-2014-6271. Gentoo Linux informed about th...

Bash: Code Injection (Updated fix for GLSA 201409-09)

Background Bash is the standard GNU Bourne Again SHell. Description Stephane Chazelas reported that Bash incorrectly handles function definitions, allowing attackers to inject arbitrary code CVE-2014-6271. Gentoo Linux informed about this issue in GLSA 201409-09. Tavis Ormandy reported that the...

GLSA-201409-08 : libxml2: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201409-08 libxml2: Denial of Service A vulnerability in the xmlParserHandlePEReference function of parser.c, when expanding entity references, can be exploited to consume large amounts of memory and cause a crash or hang. Impact :...

Zend Framework: SQL injection

Background Zend Framework is a high quality and open source framework for developing Web Applications. Description Developers using non-ASCII-compatible encodings in conjunction with the MySQL PDO driver of PHP may be vulnerable to SQL injection attacks. Impact A remote attacker could use special...