573 matches found
Debian DSA-1165-1 : capi4hylafax - missing input sanitising
Lionel Elie Mamane discovered a security vulnerability in capi4hylafax, tools for faxing over a CAPI 2.0 device, that allows remote attackers to execute arbitrary commands on the fax receiving system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian DSA-970-1 : kronolith - missing input sanitising
Johannes Greil of SEC Consult discovered several cross-site scripting vulnerabilities in kronolith, the Horde calendar application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-970. The...
Debian DSA-1148-1 : gallery - several vulnerabilities
Several remote vulnerabilities have been discovered in gallery, a web-based photo album. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-2734 A cross-site scripting vulnerability allows injection of web script code through HTML or EXIF information. ...
Debian DSA-925-1 : phpbb2 - several vulnerabilities
Several vulnerabilities have been discovered in phpBB, a fully featured and skinnable flat webforum. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3310 Multiple interpretation errors allow remote authenticated users to inject arbitrary web script...
Debian DSA-1147-1 : drupal - missing input sanitising
Ayman Hourieh discovered that Drupal, a dynamic website platform, performs insufficient input sanitising in the user module, which might lead to cross-site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Debian DSA-1061-1 : popfile - missing input sanitising
It has been discovered that popfile, a bayesian mail classifier, can be forced into a crash through malformed character sets within email messages, which allows denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Debian DSA-1136-1 : gpdf - wrong input sanitising
'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which are also present in gpdf, the viewer with Gtk bindings, and which can lead to a denial of service by crashing the application or possibly to the execution of...
Debian DSA-963-1 : mydns - missing input sanitising
NISCC reported that MyDNS, a DNS server using a SQL database for data storage, can be tricked into an infinite loop by a remote attacker and hence cause a denial of service condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
[SECURITY] [DSA 1167-1] New apache packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1167-1 [email protected] http://www.debian.org/security/ Steve Kemp September 4th, 2005 http://www.debian.org/security/faq -...
DSA-1167-1 apache - missing input sanitising
Bulletin has no description...
[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...
DSA-1165 capi4hylafax - missing input sanitising
Bulletin has no description...
DSA-1152 trac - missing input sanitising
Bulletin has no description...
DSA-1147-1 drupal - missing input sanitising
Bulletin has no description...
DSA-1148-1 gallery - several vulnerabilities
Bulletin has no description...
[SECURITY] [DSA 1144-1] New chmlib packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1144-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 7th, 2006 http://www.debian.org/security/faq -...
DSA-1144-1 chmlib - missing input sanitising
Bulletin has no description...
DSA-1136-1 gpdf - wrong input sanitising
Bulletin has no description...
[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code
-------------------------------------------------------------------------- Debian Security Advisory DSA 1133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 1st, 2006 http://www.debian.org/security/faq -...