Mandrake Linux Security Advisory : php (MDKSA-2006:196)

The Hardened-PHP Project discovered buffer overflows in htmlentities/htmlspecialchars internal routines to the PHP Project. The purpose of these functions is to be filled with user input. The overflow can only be when UTF-8 is used CVE-2006-5465 Unspecified vulnerabilities in PHP, probably before...

Mandrake Linux Security Advisory : dbus (MDKSA-2006:233)

A vulnerability was discovered in D-Bus that could be exploited by a local attacker to cause a Denial of Service. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Mandrake Linux Security Advisory : gtk+2.0 (MDKSA-2007:039)

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 allows context-dependent attackers to cause a denial of service crash via a malformed image file. CVE-2007-0010 The version of libgtk+2.0 shipped with Mandriva Linux 2007 fails various portions of the lsb-test-desktop test suite, par...

Mandrake Linux Security Advisory : bind (MDKSA-2006:163)

A vulnerability in BIND was discovered where it did not sufficiently verify particular requests and responses from other name servers and users. This could be exploited by sending a specially crafted packet to crash the name server. Updated packages have been patched to address these issues...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:124)

A race condition in the Linux kernel 2.6.17.4 and earlier allows local users to obtain root privileges due to a race condition in the /proc filesystem. The provided packages are patched to fix these vulnerabilities. All users are encouraged to upgrade to these updated kernels immediately and rebo...

Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2006:146)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program. Corporate 3 had contained the Mozilla suite however, due to the support cycle for Mozilla, it was felt that upgrading Mozilla to Firefox and Thunderbird would allow for better future...

Mandrake Linux Security Advisory : libtiff (MDKSA-2006:137)

Tavis Ormandy, Google Security Team, discovered several vulnerabilities the libtiff image processing library : Several buffer overflows have been discovered, including a stack buffer overflow via TIFFFetchShortPair in tifdirread.c, which is used to read two unsigned shorts from the input file...

Mandrake Linux Security Advisory : openssl (MDKSA-2006:161)

Daniel Bleichenbacher recently described an attack on PKCS 1 v1.5 signatures where an RSA key with a small exponent used could be vulnerable to forgery of a PKCS 1 v1.5 signature signed by that key. Any software using OpenSSL to verify X.509 certificates is potentially vulnerable to this issue, a...

Mandrake Linux Security Advisory : apache (MDKSA-2006:133)

Mark Dowd, of McAffee Avert Labs, discovered a potential remotely exploitable off-by-one flaw in Apache's modrewrite ldap scheme handling. In order for this to be exploitable, a number of conditions need to be met including a running a vulnerable version of Apache 1.3.28+, 2.0.46+, or 2.2.0+, b...

Mandrake Linux Security Advisory : freetype2 (MDKSA-2006:129)

An additional overflow, similar to those corrected by patches for CVE-2006-1861 was found in libfreetype. If a user loads a carefully crafted font file with a program linked against FreeType, it could cause the application to crash or execute arbitrary code as the user. Updated packages have been...

Mandrake Linux Security Advisory : webmin (MDKSA-2006:125)

Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files. NOTE: This is a different issue than CVE-2006-3274. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : wireshark (MDKSA-2006:152)

Vulnerabilities in the SCSI, DHCP, and SSCOP dissectors were discovered in versions of wireshark less than 0.99.3, as well as an off-by-one error in the IPsec ESP preference parser if compiled with ESP decryption support. This updated provides wireshark 0.99.3a which is not vulnerable to these...

Mandrake Linux Security Advisory : gimp (MDKSA-2006:127)

A buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp 2.2.x allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property. Updated packages have been patched to...

Mandrake Linux Security Advisory : mailman (MDKSA-2006:165)

A flaw was discovered in how Mailman handles MIME multipart messages where an attacker could send a carefully-crafted MIME multipart message to a Mailman-run mailing list causing that mailing list to stop working CVE-2006-2941. As well, a number of XSS cross-site scripting issues were discovered...

Mandrake Linux Security Advisory : gnupg (MDKSA-2006:141)

An integer overflow vulnerability was discovered in gnupg where an attacker could create a carefully-crafted message packet with a large length that could cause gnupg to crash or possibly overwrite memory when opened. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C...

Mandrake Linux Security Advisory : sudo (MDKSA-2006:159)

Previous sudo updates were made available to sanitize certain environment variables from affecting a sudo call, such as PYTHONINSPECT, PERL5OPT, etc. While those updates were effective in addressing those specific environment variables, other variables that were not blacklisted were being made...

Mandrake Linux Security Advisory : sendmail (MDKSA-2006:156)

Moritz Jodeit discovered a vulnerability in sendmail when processing very long header lines that could be exploited to cause a Denial of Service by crashing sendmail. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:151)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to and including 2.6.16-rc2, when running on x8664 systems with preemption enabled, local users can cause a DoS oops via multiple ptrace tasks that perform single steps CVE-2006-1066. Prior to 2.6.16, a...

Mandrake Linux Security Advisory : clamav (MDKSA-2006:138)

Damian Put discovered a boundary error in the UPX extraction module in ClamAV which is used to unpack PE Windows executables. This could be abused to cause a Denial of Service issue and potentially allow for the execution of arbitrary code with the permissions of the user running clamscan or clam...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2006:130)

KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service application crash by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 zero argument. This issue does not affect Corpora...