Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:228)

Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...

Mandrake Linux Security Advisory : ethereal (MDKSA-2005:227)

A stack-based buffer overflow was discovered in the OSPF dissector in Ethereal. This could potentially be abused to allow remote attackers to execute arbitrary code via crafted packets. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Network Security,...

Mandrake Linux Security Advisory : ffmpeg (MDKSA-2005:231)

Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...

Mandrake Linux Security Advisory : w3c-libwww (MDKSA-2005:210)

Sam Varshavchik discovered the HTBoundaryputblock function in HTBound.c for W3C libwww w3c-libwww allows remote servers to cause a denial of service segmentation fault via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read. The updated packages have been patched to...

Mandrake Linux Security Advisory : kdegraphics (MDKSA-2006:012)

Multiple heap-based buffer overflows in the DCTStream::readProgressiveSOF and DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, allow user-complicit attackers to cause a denial of service heap corruption and possibly execute arbitrary code via...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2005:236)

Fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a DoS application crash by sending messages without headers from upstream mail servers. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : spamassassin (MDKSA-2005:221)

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients 'To' addresses, which triggers a bus error in Perl. Updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandrake Linux Security Advisory : cups (MDKSA-2006:010)

Multiple heap-based buffer overflows in the DCTStream::readProgressiveSOF and DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, allow user-complicit attackers to cause a denial of service heap corruption and possibly execute arbitrary code via...

Mandrake Linux Security Advisory : webmin (MDKSA-2005:176)

Miniserv.pl in Webmin 1.220, when 'full PAM conversations' is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return. The updated packages have been patched to correct this issues. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : mailman (MDKSA-2005:222)

Scrubber.py in Mailman 2.1.4 - 2.1.6 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service. CVE-2005-3573 In addition, these versions of mailman have an issue where the server will fail with an Overflow on...

Mandrake Linux Security Advisory : koffice (MDKSA-2005:185)

Chris Evans reported a heap based buffer overflow in the RTF importer of KWord. An attacker could provide a specially crafted RTF file, which when opened in KWord can cause execution of arbitrary code. The updated packages are patched to deal with these issues. %NASLMINLEVEL 70300 C Tenable Netwo...

Mandrake Linux Security Advisory : gstreamer-ffmpeg (MDKSA-2005:232)

Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...

Mandrake Linux Security Advisory : graphviz (MDKSA-2005:188)

Javier Fernndez-Sanguino Pea discovered insecure temporary file creation in graphviz, a rich set of graph drawing tools, that can be exploited to overwrite arbitrary files by a local attacker. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : apache2 (MDKSA-2006:007)

A flaw was discovered in modimap when using the Referer directive with image maps that could be used by a remote attacker to perform a cross- site scripting attack, in certain site configurations, if a victim could be forced to visit a malicious URL using certain web browsers CVE-2005-3352. Also,...

Mandrake Linux Security Advisory : squid (MDKSA-2005:195)

The rfc1738doescape function in ftp.c for Squid 2.5.STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain 'odd' responses. The updated packages have been patched to address these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandrake Linux Security Advisory : apache-mod_auth_shadow (MDKSA-2005:200)

The modauthshadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use the require group directive, even when other authentication mechanisms are specified, which might allow remote authenticated users to bypass security...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2005:190)

A bug was found in the way the pamldap module processed certain failure messages. If the server includes supplemental data in an authentication failure result message, but the data does not include any specific error code, the pamldap module would proceed as if the authentication request had...

Mandrake Linux Security Advisory : unzip (MDKSA-2005:197)

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges. CVE-2005-0602 Imran Ghory found a race condition in the handling of output files. While a file was unpacked by unzip, a local attacker with write...

Mandrake Linux Security Advisory : ruby (MDKSA-2005:191)

Yutaka Oiwa discovered a bug in Ruby, the interpreter for the object-oriented scripting language, that can cause illegal program code to bypass the safe level and taint flag protections check and be executed. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C...

Mandrake Linux Security Advisory : imap (MDKSA-2005:189)

'infamous41md' discovered a buffer overflow in uw-imap, the University of Washington's IMAP Server that allows attackers to execute arbitrary code. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...