Mandriva Linux Security Advisory : mpg123 (MDVSA-2009:093-1)

A vulnerability has been found and corrected in mpg123 : Integer signedness error in the storeid3text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service out-of-bounds memory access and possibly execute arbitrary code via an ID3 tag with a negati...

Mandriva Linux Security Advisory : nasm (MDVSA-2008:120)

An off-by-one error was found in nasm 2.02 that allowed context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow CVE-2008-2719. The updated packages have been patched to prevent this issue...

Mandriva Linux Security Advisory : tomcat5 (MDVSA-2008:188)

A number of vulnerabilities have been discovered in the Apache Tomcat server : The default catalina.policy in the JULI logging component did not restrict certain permissions for web applications which could allow a remote attacker to modify logging configuration options and overwrite arbitrary...

Mandriva Linux Security Advisory : stunnel (MDVSA-2008:168)

A vulnerability was found in the OCSP search functionality in stunnel that could allow a remote attacker to use a revoked certificate that would be successfully authenticated by stunnel CVE-2008-2420. This flaw only concerns users who have enabled OCSP validation in stunnel. The updated packages...

Mandriva Linux Security Advisory : mono (MDVSA-2008:210-1)

CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string. The updated packages have been patched to fix the issue. Update : This update was too late f...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2009:070)

senddoc uses temporary files /tmp/log.obr.4043 in a insecure way which enables local attackers to overwrite arbitrary files by using a symlink attack CVE-2008-4937. This update provides fix for that vulnerability. Update : Further this update is a rebuild against lastest xulrunner 1.9.0.6...

Mandriva Linux Security Advisory : tomcat5 (MDVSA-2009:018)

Apache Tomcat does not properly handle certain characters in a cookie value, which could possibly lead to the leak of sensitive information such as session IDs CVE-2007-5333. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : mysql (MDVSA-2008:149)

Sergei Golubchik found that MySQL did not properly validate optional data or index directory paths given in a CREATE TABLE statement; as well it would not, under certain conditions, prevent two databases from using the same paths for data or index files. This could allow an authenticated user wit...

Mandriva Linux Security Advisory : gcc (MDVSA-2008:066)

Jurgen Weigert found a directory traversal vulnerability in fastjar versions prior to 0.93. This vulnerability allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filename with ../ sequences. The updated packages have been patched to correct this issue...

Mandriva Linux Security Advisory : fetchmail (MDVSA-2008:117)

A flaw in fetchmail was discovered that allowed remote attackers to cause a denial of service crash and persistent mail failure via a malformed message with long headers. The crash only occured when fetchmail was called in '-v -v' mode CVE-2008-2711. The updated packages have been patched to...

Mandriva Linux Security Advisory : tk (MDVSA-2008:041)

The ReadImage function in Tk did not check codeSize read from GIF images prior to initializing the append array, which could lead to a buffer overflow with unknown impact. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : vinagre (MDVSA-2008:240)

Alfredo Ortega found a flaw in how Vinagre uses format strings. A remote attacker could exploit this vulnerability if they were able to trick a user into connecting to a malicious VNC server, or opening a specially crafted URI with Vinagre. With older versions of Vinagre, it was possible to execu...

Mandriva Linux Security Advisory : mysql (MDVSA-2008:150)

Multiple buffer overflows in yaSSL, which is used in MySQL, allowed remote attackers to execute arbitrary code CVE-2008-0226 or cause a denial of service via a special Hello packet CVE-2008-0227. Sergei Golubchik found that MySQL did not properly validate optional data or index directory paths...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:239)

Ilja van Sprundel found that ClamAV contained a denial of service vulnerability in how it handled processing JPEG files, due to it not limiting the recursion depth when processing JPEG thumbnails CVE-2008-5314. Other bugs have also been corrected in 0.94.2 which is being provided with this update...

Mandriva Linux Security Advisory : sarg (MDVSA-2008:079)

A stack-based buffer overflow in sarg Squid Analysis Report Generator allowed remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header CVE-2008-1167. A cross-site scripting vulnerability in sarg version 2.x prior to 2.2.5 allowed remote attackers to inject...

Mandriva Linux Security Advisory : libxslt (MDVSA-2008:151)

A buffer overflow vulnerability in libxslt could be exploited via an XSL style sheet file with a long XLST transformation match condition, which could possibly lead to the execution of arbitrary code CVE-2008-1767. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 ...

Mandriva Linux Security Advisory : evolution-data-server (MDVSA-2009:078)

A wrong handling of signed Secure/Multipurpose Internet Mail Extensions S/MIME e-mail messages enables attackers to spoof its signatures by modifying the latter copy CVE-2009-0547. Crafted authentication challange packets NT Lan Manager type 2 sent by a malicious remote mail server enables remote...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:095)

A vulnerability in HSQLDB before 1.8.0.9 in OpenOffice.org could allow user-assisted remote attackers to execute arbitrary Java code via crafted database documents CVE-2007-4575. A heap overflow was discovered in OpenOffice.org's EMF parser. An attacker could create a carefully crafted EMF file...

Mandriva Linux Security Advisory : lynx (MDVSA-2008:218)

A vulnerability was found in the Lynxcgi: URI handler that could allow an attacker to create a web page redirecting to a malicious URL that would execute arbitrary code as the user running Lynx, if they were using the non-default Advanced user mode CVE-2008-4690. This update corrects these issues...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2008:047)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.9. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...