573 matches found
Debian DSA-695-1 : xli - buffer overflow, input sanitising, integer overflow
Several vulnerabilities have been discovered in xli, an image viewer for X11. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2001-0775 A buffer overflow in the decoder for FACES format images could be exploited by an attacker to execute arbitrary code...
Debian DSA-690-1 : bsmtpd - missing input sanitising
Bastian Blank discovered a vulnerability in bsmtpd, a batched SMTP mailer for sendmail and postfix. Unsanitised addresses can cause the execution of arbitrary commands during alleged mail delivery. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
[SECURITY] [DSA 690-1] New bsmtpd packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 690-1 [email protected] http://www.debian.org/security/ Martin Schulze February 25th, 2005 http://www.debian.org/security/faq -...
DSA-690-1 bsmtpd - missing input sanitising
Bulletin has no description...
Debian DSA-650-1 : sword - missing input sanitising
Ulf Harnhammar discovered that due to missing input sanitising in diatheke, a CGI script for making and browsing a bible website, it is possible to execute arbitrary commands via a specially crafted URL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...
[SECURITY] [DSA 650-1] New sword packages fix arbitrary command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 650-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 650-1] New sword packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 650-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2005 http://www.debian.org/security/faq -...
DSA-650-1 sword - missing input sanitising
Bulletin has no description...
[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution
-------------------------------------------------------------------------- Debian Security Advisory DSA 564-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...
Debian DSA-471-1 : interchange - missing input sanitising
A vulnerability was discovered recently in Interchange, an e-commerce and general HTTP database display system. This vulnerability can be exploited by an attacker to expose the content of arbitrary variables. An attacker may learn SQL access information for your Interchange application and use th...
[SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 496-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 471-1] New interchange packages fix information leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 471-1 [email protected] http://www.debian.org/security/ Martin Schulze April 2nd, 2004 http://www.debian.org/security/faq -...