Debian 'login' 本地权限升级漏洞

Debian is prone to a local privilege-escalation vulnerability because of an error in the 'login' program. Local attackers in the UTMP group could exploit this issue to take ownership of arbitrary files on the vulnerable system. This may lead to a complete compromise of the system. Debian Linux 3....

[SECURITY] [DSA 1683-1] New streamripper packages fix potential code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1683-1 [email protected] http://www.debian.org/security/ Florian Weimer December 08, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1650-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 12, 2008 http://www.debian.org/security/faq -...

Afuse afuse.c文件Shell命令注入漏洞

BUGTRAQ ID: 30245 CVECAN ID: CVE-2008-2232 Afuse是使用FUSE在用户域实现的自动加载文件系统。 Afuse没有正确地过滤文件名便将其用在了system调用中。如果能够读访问afuse文件系统的攻击者使用了类似于以下的路径的话： /path/";arbitrary command;" /path/arbitrary command 则从注册为Afuse加载的目录请求上述特制文件就会导致以提升的权限执行任意命令。 Jacob Bower Afuse 0.2 Debian ------...

[SECURITY] [DSA 1598-1] New libtk-img packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1598-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 19, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1587-1] New mtr packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1587-1 [email protected] http://www.debian.org/security/ Steve Kemp May 26, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 1584-1] New libfissound packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1584-1 [email protected] http://www.debian.org/security/ Steve Kemp May 21, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Xpdf嵌入字体处理代码执行漏洞

BUGTRAQ ID: 28830 CVECAN ID: CVE-2008-1693 Xpdf是便携文档格式（PDF）文件的开放源码查看器。 Xpdf显示PDF文件中所嵌入的畸形字体的方式存在漏洞，攻击者可以创建恶意的PDF文件，如果打开了该文件就会导致Xpdf崩溃或执行任意指令。 Xpdf 3.x Debian ------ Debian已经为此发布了一个安全公告（DSA-1548-1）以及相应补丁: DSA-1548-1：New xpdf packages fix arbitrary code exitution...

Lighttpd SSL错误拒绝服务漏洞

BUGTRAQ ID: 28489 CVECAN ID: CVE-2008-1531 Lighttpd是一款轻型的开放源码Web Server软件包。 lighttpd没有正确地清除OpenSSL错误队列，如果远程攻击者可以触发SSL错误的话，如在下载结束前断开连接，lighttpd就可能断开所有活动的SSL连接。 LightTPD 1.4.19 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1540-2）以及相应补丁: DSA-1540-2：New lighttpd packages fix denial of service...

[SECURITY] [DSA 1499-1] New pcre3 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1499-1 [email protected] http://www.debian.org/security/ Florian Weimer February 19, 2008 http://www.debian.org/security/faq -...

apt-listchanges不安全路径库导入本地SHELL代码执行漏洞

apt-listchanges是一款使用当前安装来对比新版本的工具。 apt-listchanges当导入部分库的时候使用不安全路径，本地攻击者可以利用漏洞以应用程序进程权限执行任意SHELL代码。 目前没有详细漏洞细节提供。 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32...

[SECURITY] [DSA 1470-1] New horde3 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1470-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 20, 2008 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-1391-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-480)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 480-1 (kernel-image-2.4.17-hppa kernel-image-2.4.18-hppa)

The remote host is missing an update to kernel-image-2.4.17-hppa kernel-image-2.4.18-hppa announced via advisory DSA 480-1. OpenVAS Vulnerability Test $Id: deb4801.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 480-1 Authors: Thomas Reinke Copyright:...

Debian Security Advisory DSA 470-1 (kernel-image-2.4.17-hppa)

The remote host is missing an update to kernel-image-2.4.17-hppa announced via advisory DSA 470-1. OpenVAS Vulnerability Test $Id: deb4701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 470-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1341-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1443-1] New tcpreen packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1443-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1426-1] New qt-x11-free packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1426-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 08, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1416-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...