Mandriva Linux Security Advisory : mod_perl (MDVSA-2009:091-1)

A vulnerability has been found and corrected in modperl v1.x and v2.x : Cross-site scripting XSS vulnerability in Status.pm in Apache::Status and Apache2::Status in modperl1 and modperl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web...

Mandriva Linux Security Advisory : krb5 (MDVSA-2008:069)

Multiple memory management flaws were found in the GSSAPI library used by Kerberos that could result in the use of already freed memory or an attempt to free already freed memory, possibly leading to a crash or allowing the execution of arbitrary code CVE-2007-5901, CVE-2007-5971. A flaw was...

Mandriva Linux Security Advisory : firefox (MDVSA-2009:075)

Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox 3.x, version 3.0.7 CVE-2009-0040, CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774, CVE-2009-0775, CVE-2009-0776, CVE-2009-0777. This update provides the latest Mozilla Firefox 3.x to correct these...

Mandriva Linux Security Advisory : unzip (MDVSA-2008:068)

Tavis Ormandy of Google Security discovered an invalid pointer flaw in unzip that could lead to the execution of arbitrary code with the privileges of the user running unzip. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : icu (MDVSA-2008:026)

Will Drewry reported multiple flaws in how libicu processed certain malformed regular expressions. If an application linked against libicu, such as OpenOffice.org, processed a carefully-crafted regular expression, it could potentially cause the execution of arbitrary code with the privileges of t...

Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2009:074)

A security vulnerability has been identified and fixed in neon : neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service NULL pointer dereference and crash via vectors related to Digest authentication and Digest domain parameter support CVE-2008-3746. The updated packages ha...

Mandriva Linux Security Advisory : emacs (MDVSA-2008:153)

A vulnerability in emacs was found where an attacker could provide a group of files containing local variable definitions and arbitrary Lisp code to be executed when one of the provided files is opened by emacs CVE-2008-2142. The updated packages have been patched to correct this issue...

Mandriva Linux Security Advisory : pam_mount (MDVSA-2009:004)

passwdehd script in pammount would allow local users to overwrite arbitrary files via a symlink attack on a temporary file. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandriva Linux Security Advisory : shadow-utils (MDVSA-2009:062)

A security vulnerability has been identified and fixed in login application from shadow-utils, which could allow local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line aka utline field in a utmp entry CVE-2008-5394. The updated...

Mandriva Linux Security Advisory : blender (MDVSA-2008:204)

Stefan Cornelius of Secunia Research reported a boundary error when Blender processed RGBE images which could be used to execute arbitrary code with the privileges of the user running Blender if a specially crafted .hdr or .blend file were openedCVE-2008-1102. As well, multiple vulnerabilities...

Mandriva Linux Security Advisory : php (MDVSA-2008:127)

A number of vulnerabilities have been found and corrected in PHP : The htmlentities and htmlspecialchars functions in PHP prior to 5.2.5 accepted partial multibyte sequences, which has unknown impact and attack vectors CVE-2007-5898. The outputaddrewritevar function in PHP prior to 5.2.5 rewrites...

Mandriva Linux Security Advisory : rsync (MDVSA-2008:011)

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy. CVE-2007-6199 Unspecified vulnerability in rsync before...

Mandriva Linux Security Advisory : wireshark (MDVSA-2009:088)

Multiple vulnerabilities has been identified and corrected in wireshark : o The PROFINET dissector was vulnerable to a format string overflow CVE-2009-1210. o The Check Point High-Availability Protocol CPHAP dissecto could crash CVE-2009-1268. o Wireshark could crash while loading a Tektronix .rf...

Mandriva Linux Security Advisory : net-snmp (MDVSA-2008:225)

A denial of service vulnerability was discovered in how Net-SNMP processed GETBULK requests. A remote attacker with read access to the SNMP server could issue a specially crafted request which would cause snmpd to crash CVE-2008-4309. Please note that for this to be successfully exploited, an...

Mandriva Linux Security Advisory : wml (MDVSA-2008:076)

Two vulnerabilities were found in the Website META Language WML package that allowed local users to overwrite arbitrary files via symlink attacks. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandriva Linux Security Advisory : postgresql (MDVSA-2009:079)

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service stack consumption and crash by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding...

Mandriva Linux Security Advisory : openssh (MDVSA-2008:078)

OpenSSH allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Mandriva Linux Security Advisory : enscript (MDVSA-2008:243)

Two buffer overflow vulnerabilities were discovered in GNU enscript, which could allow an attacker to execute arbitrary commands via a specially crafted ASCII file, if the file were opened with the -e or --escapes option enabled CVE-2008-3863, CVE-2008-4306. The updated packages have been patched...

Mandriva Linux Security Advisory : evolution (MDVSA-2008:111)

Alan Rad Pop of Secunia Research discovered the following two vulnerabilities in Evolution : Evolution did not properly validate timezone data when processing iCalendar attachments. If a user disabled the Itip Formatter plugin and viewed a crafted iCalendar attachment, an attacker could cause a...

Mandriva Linux Security Advisory : xterm (MDVSA-2009:005)

A vulnerability has been discovered in xterm, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to xterm not properly processing the DECRQSS Device Control Request Status String escape sequence. This can be exploited to inject and execute...