Debian DSA-1148-1 : gallery - several vulnerabilities

Several remote vulnerabilities have been discovered in gallery, a web-based photo album. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-2734 A cross-site scripting vulnerability allows injection of web script code through HTML or EXIF information. ...

Debian DSA-970-1 : kronolith - missing input sanitising

Johannes Greil of SEC Consult discovered several cross-site scripting vulnerabilities in kronolith, the Horde calendar application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-970. The...

Debian DSA-1006-1 : wzdftpd - missing input sanitising

'kcope' discovered that the wzdftpd FTP server lacks input sanitising for the SITE command, which may lead to the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian DSA-1061-1 : popfile - missing input sanitising

It has been discovered that popfile, a bayesian mail classifier, can be forced into a crash through malformed character sets within email messages, which allows denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-1147-1 : drupal - missing input sanitising

Ayman Hourieh discovered that Drupal, a dynamic website platform, performs insufficient input sanitising in the user module, which might lead to cross-site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Debian DSA-1136-1 : gpdf - wrong input sanitising

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which are also present in gpdf, the viewer with Gtk bindings, and which can lead to a denial of service by crashing the application or possibly to the execution of...

Debian DSA-925-1 : phpbb2 - several vulnerabilities

Several vulnerabilities have been discovered in phpBB, a fully featured and skinnable flat webforum. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3310 Multiple interpretation errors allow remote authenticated users to inject arbitrary web script...

Debian DSA-1066-1 : phpbb2 - missing input sanitising

It was discovered that phpbb2, a web-based bulletin board, does insufficiently sanitise values passed to the 'Font Colour 3' setting, which might lead to the execution of injected code by admin users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian DSA-1098-1 : horde3 - missing input sanitising

Michael Marek discovered that the Horde web application framework performs insufficient input sanitising, which might lead to the injection of web script code through cross-site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

[SECURITY] [DSA 1167-1] New apache packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1167-1 [email protected] http://www.debian.org/security/ Steve Kemp September 4th, 2005 http://www.debian.org/security/faq -...

DSA-1167-1 apache - missing input sanitising

Bulletin has no description...

[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...

DSA-1165 capi4hylafax - missing input sanitising

Bulletin has no description...

DSA-1152 trac - missing input sanitising

Bulletin has no description...

DSA-1147-1 drupal - missing input sanitising

Bulletin has no description...

DSA-1148-1 gallery - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1144-1] New chmlib packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1144-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 7th, 2006 http://www.debian.org/security/faq -...

DSA-1144-1 chmlib - missing input sanitising

Bulletin has no description...

DSA-1136-1 gpdf - wrong input sanitising

Bulletin has no description...

[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 1st, 2006 http://www.debian.org/security/faq -...