RHEL 4 : gnutls (RHSA-2008:0492)

Updated gnutls packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The GnuTLS Library provides support for cryptographic algorithms and protocols such as...

gnutls security update

CentOS Errata and Security Advisory CESA-2008:0489 Updated gnutls packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The GnuTLS Library provides support fo...

Important: Red Hat Security Advisory: gnutls security update

Updated gnutls packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The GnuTLS Library provides support for cryptographic algorithms and protocols such as...

DSA-1388-3 dhcp - buffer overflow

Bulletin has no description...

Debian DSA-1388-3 : dhcp - buffer overflow

The patch used to correct the DHCP server buffer overflow in DSA-1388-1 was incomplete and did not adequately resolve the problem. This update to the previous advisory makes updated packages based on a newer version of the patch available. For completeness, please find below the original advisory...

gMotor2 Game Engine - Multiple Vulnerabilities

gMotor2 Game Engine - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/25358/info The gMotor2 game engine is prone to multiple code-execution and denial-of-service vulnerabilities. Four vulnerabilities were reported. These vulnerabilities may be triggered by malicious client...

Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets

Cisco IOS device may crash while processing malformed Secure Sockets Layer SSL packets. In order to trigger these vulnerabilities, a malicious client must send malformed packets during the SSL protocol exchange with the vulnerable device. Successful repeated exploitation of any of these...

GLSA-200604-11 : Crossfire server: Denial of Service and potential arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200604-11 Crossfire server: Denial of Service and potential arbitrary code execution Luigi Auriemma discovered a vulnerability in the Crossfire game server, in the handling of the 'oldsocketmode' option when processing overly larg...

crossfire-server -- denial of service and remote code execution vulnerability

FRSIRT reports: A vulnerability has been identified in CrossFire, which could be exploited by remote attackers to execute arbitrary commands or cause a denial of service. This flaw is due to a buffer overflow error in the "oldsocketmode" module that fails to properly handle overly large requests,...

openvpn -- denial of service: malicious authenticated "tap" client can deplete server virtual memory

James Yonan reports: A malicious authenticated client in "dev tap" ethernet bridging mode could theoretically flood the server with packets appearing to come from hundreds of thousands of different MAC addresses, causing the OpenVPN process to deplete system virtual memory as it expands its...

Raven Software Soldier Of Fortune 2 - Ignore Command Remote Denial of Service

Raven Software Soldier Of Fortune 2 - Ignore Command Remote Denial of Service source: https://www.securityfocus.com/bid/14098/info A remote denial of service vulnerability affects Raven Software Soldier Of Fortune 2. The problem presents itself specifically when the affected server application...

EveryBuddy 0.4.3 - Long Message Denial of Service

EveryBuddy 0.4.3 - Long Message Denial of Service source: https://www.securityfocus.com/bid/8343/info EveryBuddy is prone to a denial of service vulnerability when handling instant messages of excessive length. This could be exploited with a malicious instant messaging client. This condition may ...

OpenSSL SSLv2 - Malformed Client Key Remote Buffer Overflow Vulnerability 2

OpenSSL SSLv2 Malformed Client Key Remote Buffer Overflow Vulnerability 2. CVE-2002-0656. Remote exploit for unix platform source: http://www.securityfocus.com/bid/5363/info A buffer-overflow vulnerability has been reported in some versions of OpenSSL. The issue occurs in the handling of the clie...

OpenSSH 2.x3.0.13.0.2 - Channel Code Off-by-One

OpenSSH 2.x3.0.13.0.2 - Channel Code Off-by-One source: https://www.securityfocus.com/bid/4241/info OpenSSH is a suite implementing the SSH protocol. It includes client and server software, and supports ssh and sftp. It was initially developed for BSD, but is also widely used for Linux, Solaris,...