[SECURITY] [DSA 235-1] New kdegraphics packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 235-1 [email protected] http://www.debian.org/security/ Martin Schulze January 22nd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 234-1] New kdeadmin packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 234-1 [email protected] http://www.debian.org/security/ Martin Schulze January 22nd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 234-1] New kdeadmin packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 234-1 [email protected] http://www.debian.org/security/ Martin Schulze January 22nd, 2003 http://www.debian.org/security/faq -...

New CVS packages available

New cvs packages are available to fix a security vulnerability. Here are the details from the Slackware 8.1 ChangeLog: ---------------------------- Tue Jan 21 13:12:20 PST 2003 patches/packages/cvs-1.11.5-i386-1.tgz: Upgraded to cvs-1.11.5. This release fixes a major security vulnerability in the...

[SECURITY] [DSA 233-1] New cvs packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 233-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 231-1] New dhcp3 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 231-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2003 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: vnc security update

Updated VNC packages are available to fix a challenge replay attack that is present in the VNC server. VNC is a tool for providing a remote graphical user interface. The VNC DES authentication scheme is implemented using a challenge-response architecture, producing a random and different challeng...

[SECURITY] [DSA 228-1] New libmcrypt packages fix buffer overflows and memory leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 228-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2003 http://www.debian.org/security/faq -...

zkfingerd SysLog 0.9.1 - Format String

// source: https://www.securityfocus.com/bid/6402/info zkfingerd is prone to a format string vulnerability. This problem is due to incorrect use of the 'syslog' function to log error messages. It is possible to corrupt memory by passing format strings through the vulnerable logging function. This...

Immobilier 1 (PHP)

Informations : °°°°°°°°°°°°°° Version, Website : ? Problems : - phpinfo - SQL Injection PHP Code/Location : °°°°°°°°°°°°°°°°°°° agentadmin.php : -------------------------------------------------------------- ... elseif $agentname != "" OR $currentuser != "" $sql = "SELECT id FROM agents WHERE...

Security Update: [CSSA-2002-048.0] Linux: wwwoffled remote access vulnerability

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: wwwoffled remote access vulnerability Advisory number: CSSA-2002-048.0 Issue date: 2002 November 18 Cross reference: 1. Problem...

NOVL-2002-2963651 - iManager (eMFrame) Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963651 Title: iManager eMFrame Buffer Overflow Date: 08-Oct-2002 Revision: Updates NOVL-2002-2963081 Product Name: iManager eMFra...

NOVL-2002-2963767 - Remote Manager Security Issue - eDir 8.6.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963767 Title: Remote Manager Security Issue - eDir 8.6.2 Date: 22-Oct-2002 Revision: Original Product Name: Novell eDirectory 8.6...

dobermann FORUM (php)

Informations : °°°°°°°°°°°°°° Product : dobermann FORUM version : 0.5 website : http://www.le-dobermann.com Problem : Include file PHP Code/location : °°°°°°°°°°°°°°°°°°° entete.php enteteacceuil.php topic/entete.php : ------------------------------------------ ?php @include...

[SECURITY] [DSA 173-1] New bugzilla packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 173-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2002 http://www.debian.org/security/faq -...

HP Tru64 - NLSPATH Environment Variable Local Buffer Overflow (2)

HP Tru64 - NLSPATH Environment Variable Local Buffer Overflow 2 source: https://www.securityfocus.com/bid/5647/info Tru64 is a commercially available UNIX operating system. Tru64 was originally developed by Digital and is now distributed and maintained by HP. A buffer overflow has been discovered...

Arbitrary code execution problem in Achievo

Arbitrary code execution problem in Achievo 0. Table of Contents 1. Summary / Impact analysis 2. Affected versions 3. Workaround / Solution 4. Proof of Vulnerability 5. References 1. Summary / Impact analysis Achievo is a web-based project management tool for business-environments. It has been...

Microsoft Internet Explorer 6 - File Attachment Script Execution

source: https://www.securityfocus.com/bid/5450/info An error has been reported in Microsoft Internet Explorer 6, which may allow malicious file attachments to execute arbitrary code in the context of the local system. HTM files are associated with Internet Explorer. It is possible for an attacker...

[SECURITY] [DSA 145-1] New tinyproxy packages fix security vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 145-1 [email protected] http://www.debian.org/security/ Martin Schulze August 7th, 2002 - -------------------------------------------------------------------------- Package : tinyproxy...

IPSwitch IMail 6.x/7.0/7.1 - Web Messaging GET Buffer Overflow

// source: https://www.securityfocus.com/bid/5323/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. The web messaging server is vulnerable to a buffer overflow. When the server receive...