[SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2019-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 20, 2010 http://www.debian.org/security/faq -...

ZKSoftware Biometric Attendence managnmnet Hardware [MIPS] Vuln

Exploit for hardware platform in category remote exploits ================================================================================= ZKSoftware Biometric Attendence managnmnet HardwareMIPS Improper Authentication...

PHP xmlrpc Extension Multiple Remote Denial of Service Vulnerabilities

Exploit for multiple platform in category dos / poc ====================================================================== PHP xmlrpc Extension Multiple Remote Denial of Service Vulnerabilities ====================================================================== Vulnerable: PHP PHP 5.3.1 PHP PH...

[SECURITY] [DSA-2002-1] New polipo packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2002-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1976-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 22, 2010 http://www.debian.org/security/faq -...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 4 RedHat...

[SECURITY] [DSA 1853-1] New memcached packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1853-1 [email protected] http://www.debian.org/security/ Nico Golde August 7th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1848-1] New znc packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1848-1 [email protected] http://www.debian.org/security/ Florian Weimer August 02, 2009 http://www.debian.org/security/faq -...

Debian DSA-1794-1 : linux-2.6 - denial of service/privilege escalation/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to denial of service, privilege escalation, or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4307 Bryn M. Reeves reported a denial of service in the N...

Debian: Security Advisory (DSA-1794-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1794-1 linux-2.6 - multiple vulnerabilities

Bulletin has no description...

Debian DSA-1787-1 : linux-2.6.24 - denial of service/privilege escalation/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4307 Bryn M. Reeves reported a denial of service in the NFS filesystem...

[SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1787-1 [email protected] http://www.debian.org/security/ Dann Frazier May 2, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1787-1 [email protected] http://www.debian.org/security/ Dann Frazier May 2, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1787-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

DBD::Pg 'pg_getline()'和'getline()'堆缓冲区溢出漏洞

BUGTRAQ ID: 34755 CVE ID：CVE-2009-0663 DBD::Pg是一款用于PostgreSQL数据库访问的DBI驱动模块。 DBD::Pg存在基于堆的缓冲区溢出，远程攻击者可以利用漏洞执行任意代码。 使用pggetline和getline函数可从数据库中读取行信息的应用程序可通过触发堆溢出而执行任意代码。 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux...

Debian git-core DEC Alpha & MIPS本地特权提升漏洞

BUGTRAQ ID: 34644 CNCAN ID：CNCAN-2009042201 Debian git-core是一款用于Linux内核开发的版本控制工具。 Debian git-core不正确设置权限，本地攻击者可以利用漏洞提升特权。 Git版本控制系统在部分DEC Alpha & MIPS架构上，/usr/share/git-core/templates/下的文件属主为非root用户，这允许本地系统用户写这些文件并可能导致特权提升。 Debian git-core 1.5.6 5-3 Debian git-core 1.4.4 4-4 可参考如下程序： Debian Linux...

Debian DSA-1777-1 : git-core - file permission error

Peter Palfrader discovered that in the Git revision control system, on some architectures files under /usr/share/git-core/templates/ were owned by a non-root user. This allows a user with that uid on the local system to write to these files and possibly escalate their privileges. This issue only...

[SECURITY] [DSA 1777-1] New git-core packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1777-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 21, 2009 http://www.debian.org/security/faq -...

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...