Mandriva Linux Security Advisory : dhcp (MDVSA-2010:114)

A vulnerability has been found and corrected in dhcp : ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service server exit via a zero-length client ID CVE-2010-2156. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300...

Mandriva Linux Security Advisory : git (MDVSA-2009:155)

A vulnerability has been found and corrected in git : git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a request containing extra unrecognized arguments CVE-2009-2108. This update provides fixes for this...

Mandriva Linux Security Advisory : transmission (MDVSA-2010:014)

A vulnerability has been found and corrected in transmission : Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. dot dot in a pathname within a .torrent file CVE-2010-0012. The...

Mandriva Linux Security Advisory : fetchmail (MDVSA-2010:037)

A vulnerability have been discovered and corrected in fetchmail : The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute...

Mandriva Linux Security Advisory : kdelibs4 (MDVSA-2010:027)

Multiple vulnerabilities was discovered and corrected in kdelibs4 : KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '' NUL character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL...

Mandriva Linux Security Advisory : lftp (MDVSA-2010:128)

A vulnerability has been found and corrected in lftp : The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via...

Mandriva Linux Security Advisory : kernel (MDVSA-2010:067)

This update provides a fix to the correction of CVE-2010-0307, which resulted in crashes when running i586 applications on x8664. To update your kernel, please follow the directions located at : http://www.mandriva.com/en/security/kernelupdate %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:075)

This updates provides a security update to the OpenOffice.org described as follow : OpenOffice's xmlsec uses a bundled Libtool which might load .la file in the current working directory allowing local users to gain privileges via a Trojan horse file. For enabling such vulnerability xmlsec has to...

Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2010:123)

This update fixes a reported buffer overflow found with ntlm authentication MDV 59779. This advisory obsoletes MDVA-2010:172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Security Advisory...

Mandriva Linux Security Advisory : dovecot (MDVSA-2009:306)

A vulnerability was discovered and corrected in dovecot : Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the...

Mandriva Linux Security Advisory : kernel (MDVSA-2009:329)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddpN device is not found, allows remote attackers to...

CVE-2010-2529

Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...

CVE-2010-2529

Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...

CVE-2010-2529

Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...

CVE-2010-2529

Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...

CVE-2010-2529

Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...

CVE-2010-2529

CVE-2010-2529 is an in-iputils ping.c vulnerability affecting Mandriva Linux as listed for iputils versions 20020927, 20070202, 20071127, and 20100214, enabling a remote attacker to induce a denial of service (hang) via a crafted ICMP echo response. The cited documents describe it as a network-ve...

[ MDVSA-2010:138 ] iputils

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:138 http://www.mandriva.com/security/ Package : iputils Date : July 23, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Ovidiu Mara reported a...

Mandriva Update for python MDVSA-2010:132 (python)

Check for the Version of python OpenVAS Vulnerability Test Mandriva Update for python MDVSA-2010:132 python Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for ghostscript MDVSA-2010:134 (ghostscript)

Check for the Version of ghostscript OpenVAS Vulnerability Test Mandriva Update for ghostscript MDVSA-2010:134 ghostscript Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...