Solaris Update for /usr/lib/ldap/idsconfig 115678-02

Check for the Version of /usr/lib/ldap/idsconfig OpenVAS Vulnerability Test Solaris Update for /usr/lib/ldap/idsconfig 115678-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for /usr/lib/utmp_update 113651-02

Check for the Version of /usr/lib/utmpupdate OpenVAS Vulnerability Test Solaris Update for /usr/lib/utmpupdate 113651-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Solaris Update for /usr/lib/netsvc/yp/ypbind 110322-02

Check for the Version of /usr/lib/netsvc/yp/ypbind OpenVAS Vulnerability Test Solaris Update for /usr/lib/netsvc/yp/ypbind 110322-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for /usr/lib/netsvc/yp/ypbind 110323-02

Check for the Version of /usr/lib/netsvc/yp/ypbind OpenVAS Vulnerability Test Solaris Update for /usr/lib/netsvc/yp/ypbind 110323-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for usr/lib/ldap/idsconfig 115677-02

Check for the Version of usr/lib/ldap/idsconfig OpenVAS Vulnerability Test Solaris Update for usr/lib/ldap/idsconfig 115677-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

CVE-2009-1476

CVE-2009-1476 affects Darren Reed IPFilter (IPFilter) 4.1.31. The issue is a buffer overflow in lib/load_http.c (local buffer 1024 bytes) used when building an HTTP request for IP pool management. The code copies the URL into a 1024-byte buffer and also builds the GET line with the URL, with a pa...

CVE-2009-1476: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in lib/loadhttp.c in ippool in Darren Reed IPFilter aka IP Filter 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. VID 48e14d86-42f1-11de-ad22-000e35248ad7 OpenVAS Vulnerability Test $ Description: Auto generated from VID 48e14d86-42f1-11de-ad22-000e35248ad7 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

openSUSE 10 Security Update : xine-devel (xine-devel-6230)

This update of xine-lib fixes an integer overflow in the qterror parsetrakatom function in that leads to a heap-based overflow and allows remote attackers to execute arbitrary code via a malformed Quicktime movie file. CVE-2009-1274 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : cyrus-sasl (MDVSA-2009:113-1)

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c CVE-2009-0688. The updated packages have be...

FreeBSD : libxine -- multiple vulnerabilities (51d1d428-42f0-11de-ad22-000e35248ad7)

Multiple vulnerabilities were fixed in libxine 1.1.16.2. Tobias Klein reports : FFmpeg contains a type conversion vulnerability while parsing malformed 4X movie files. The vulnerability may be exploited by a remote attacker to execute arbitrary code in the context of FFmpeg or an application usin...

CVE-2009-0688

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

CVE-2009-0688: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

CVE-2008-6793: Improper Input Validation

The getfiletype function in lib/filecontent.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image...

CVE-2009-1416: Undefined Security Weakness

lib/gnutlspk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key...

CVE-2009-1415: Access of Uninitialized Pointer

lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service application crash and possibly have unspecified other impact via a malformed DSA key that triggers a 1 free of an uninitialized pointe...

Fedora 10 : xine-lib-1.1.16.2-1.fc10 (2009-1525)

This release contains one new security fix CVE-2008-5240 and corrections of previous security fixes. It also includes fixes for race conditions in gaplessswitch ref. kde bug 180339 See also: http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 660071 Note that Tenable Network...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : xine-lib vulnerabilities (USN-763-1)

It was discovered that the QT demuxer in xine-lib did not correctly handle a large count value in an STTS atom, resulting in a heap-based buffer overflow. If a user or automated system were tricked into opening a specially crafted MOV file, an attacker could execute arbitrary code as the user...

Fedora 10 : xine-lib-1.1.16-1.fc10 (2009-0483)

This updates xine-lib to the upstream 1.1.16 release. This fixes several bugs, including the security issues CVE-2008-5234 vector 1, CVE-2008-5236, CVE-2008-5237, CVE-2008-5239, CVE-2008-5240 vectors 3 & 4 and CVE-2008-5243. See http://sourceforge.net/project/shownotes.php?releaseid=652075&groupi...