Debian: Security Advisory (DSA-2365-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2400-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2400-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 02, 2012 http://www.debian.org/security/faq -...

Debian DSA-2365-1 : dtc - several vulnerabilities

Ansgar Burchardt, Mike O'Connor and Philipp Kern discovered multiple vulnerabilities in DTC, a web control panel for admin and accounting hosting services : - CVE-2011-3195 A possible shell insertion has been found in the mailing list handling. - CVE-2011-3196 Unix rights for the apache2.conf wer...

[SECURITY] [DSA 2294-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2294-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 14, 2011 http://www.debian.org/security/faq -...

DSA-2216-1 isc-dhcp - missing input sanitizing

Bulletin has no description...

DSA-2217-1 dhcp3 - missing input sanitizing

Bulletin has no description...

DSA-2213-1 x11-xserver-utils - missing input sanitizing

Bulletin has no description...

DSA-2198-1 tex-common - insufficient input sanitizing

Bulletin has no description...

[SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2092-1 [email protected] http://www.debian.org/security/ Sebastien Delafond Aug 17th, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2092-1 [email protected] http://www.debian.org/security/ Sébastien Delafond Aug 17th, 2010 http://www.debian.org/security/faq -...

Debian DSA-2056-1 : zonecheck - missing input sanitizing

It was discovered that in ZoneCheck, a tool to check DNS configurations, the CGI does not perform sufficient sanitation of user input; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Practical Web Security testing of HTTP truncated smuggling vulnerability-vulnerability warning-the black bar safety net

In this article, we will detailed to introduce the reader for the HTTP truncated and HTTP smuggling attack security testing techniques. We will by example demonstrate how to use the HTTP Protocol, certain properties, or the use of Web application weaknesses, or different proxy for HTTP message of...

[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing

------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1933-1] New cups packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1933-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 10, 2009 http://www.debian.org/security/faq -...

DTSA-187-1 moin - insufficient input sanitising

Bulletin has no description...

Debian DSA-1579-1 : netpbm-free - insufficient input sanitizing

A vulnerability was discovered in the GIF reader implementation in netpbm-free, a suite of image manipulation utilities. Insufficient input data validation could allow a maliciously-crafted GIF file to overrun a stack buffer, potentially permitting the execution of arbitrary code. %NASLMINLEVEL...

Debian DSA-1539-1 : mapserver - several vulnerabilities

Chris Schmidt and Daniel Morissette discovered two vulnerabilities in mapserver, a development environment for spatial and mapping applications. The Common Vulnerabilities and Exposures project identifies the following two problems : - CVE-2007-4542 Lack of input sanitizing and output escaping in...

Debian DSA-1533-2 : exiftags - insufficient input sanitizing

Christian Schmid and Meder Kydyraliev Google Security discovered a number of vulnerabilities in exiftags, a utility for extracting EXIF metadata from JPEG images. The Common Vulnerabilities and Exposures project identified the following three problems : - CVE-2007-6354 Inadequate EXIF property...

Debian Security Advisory DSA 1468-1 (tomcat5.5)

The remote host is missing an update to tomcat5.5 announced via advisory DSA 1468-1. OpenVAS Vulnerability Test $Id: deb14681.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1468-1 tomcat5.5 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1468-1 : tomcat5.5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0128 Olaf Kock discovered that HTTPS encryption was insufficiently enforced for single-sign-on cookies, which...