183 matches found
[SECURITY] [DSA 596-2] New sudo packages removes debug output
-------------------------------------------------------------------------- Debian Security Advisory DSA 596-2 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2004 http://www.debian.org/security/faq -...
GLSA-200406-09 : Horde-Chora: Remote code execution
The remote host is affected by the vulnerability described in GLSA-200406-09 Horde-Chora: Remote code execution A vulnerability in the diff viewer of Chora allows an attacker to inject shellcode. An attacker can exploit PHP's file upload functionality to upload a malicious binary to a vulnerable...
Horde-Chora: Remote code execution
Background Chora is a PHP-based SVN/CVS repository viewer by the HORDE project. Description A vulnerability in the diff viewer of Chora allows an attacker to inject shellcode. An attacker can exploit PHP's file upload functionality to upload a malicious binary to a vulnerable server, chmod it as...
Veritas NetBackup 3.54.55.0 - Multiple Local Memory Corruption Vulnerabilities (2)
Veritas NetBackup 3.54.55.0 - Multiple Local Memory Corruption Vulnerabilities 2 source: https://www.securityfocus.com/bid/10226/info Multiple unspecified local buffer overrun and format string vulnerabilities have been reported to exist in various setuid Veritas NetBackup binaries. These issues...
UTempter 0.5.x - Multiple Local Vulnerabilities
UTempter 0.5.x - Multiple Local Vulnerabilities source: https://www.securityfocus.com/bid/10178/info It has been reported that utempter is affected by multiple local vulnerabilities. The first issue is due to an input validation error that causes the application to exit improperly; facilitating...
UTempter 0.5.x - Multiple Local Vulnerabilities
source: https://www.securityfocus.com/bid/10178/info It has been reported that utempter is affected by multiple local vulnerabilities. The first issue is due to an input validation error that causes the application to exit improperly; facilitating symbolic link attacks. The second issue is due to...
[SECURITY] [DSA 482-1] New Linux 2.4.17 packages fix local root exploit (source+powerpc/apus+s390)
-------------------------------------------------------------------------- Debian Security Advisory DSA 482-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)
-------------------------------------------------------------------------- Debian Security Advisory DSA 479-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...
CVE-2003-0924
netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...
SRT2003-11-06-0710 - IBM DB2 Multiple local security issues
Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
apache security update
Apache httpd is a hypertext transfer protocol server, and is used by over two thirds of the Internet's web sites. Upgraded Apache packages are available for Slackware 8.1, 9.0, 9.1, and -current. These fix local vulnerabilities that could allow users who can create or edit Apache config files to...
Multiple integer overflows in XFree86 (local/remote)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote and local vulnerabilities in XFree86 font libraries Product: XFree86 4.3.0 Impact: Potential privilege escalation / remote code execution Bug class: Integer overflow Vendor notified: Yes Fix available: Yes see end of advisory Details: I have...
Speak Freely <=7.5 multiple remote and local vulnerabilities (the Hackademy Audit)
-- Summary -- Speak Freely is a free and open-sourced software used for efficient and secure encrypted voice communication over the Internet. It was written by John Walker, and runs on Windows and Unix. Homepage : http://www.fourmilab.ch/speakfree/ During a source code audit, the Hackademy staff...
[SECURITY] [DSA 202-2] New IM packages correct hidden architecture dependency
-------------------------------------------------------------------------- Debian Security Advisory DSA 202-2 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 202-1] New IM packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 202-1 [email protected] http://www.debian.org/security/ Martin Schulze December 3rd, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 187-1] New Apache packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 187-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2002 http://www.debian.org/security/faq -...
[CLA-2002:529] Conectiva Linux Security Announcement - XFree86
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : XFree86 SUMMARY : Local vulnerabilities DATE :...
Few bugs in Kismet
Local and remote buffer overflows...