357 matches found
DSA-3272-1 ipsec-tools - security update
Bulletin has no description...
[SECURITY] [DSA 3263-1] proftpd-dfsg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3263-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 19, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3263-1 (proftpd-dfsg - security update)
Vadim Melihow discovered that in proftpd-dfsg, an FTP server, the modcopy module allowed unauthenticated users to copy files around on the server, and possibly to execute arbitrary code. OpenVAS Vulnerability Test $Id: deb3263.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory...
DLA-220-1 dpkg - security update
Bulletin has no description...
Debian Security Advisory DSA 3246-1 (ruby1.9.1 - security update)
It was discovered that the Ruby OpenSSL extension, part of the interpreter for the Ruby language, did not properly implement hostname matching, in violation of RFC 6125. This could allow remote attackers to perform a man-in-the-middle attack via crafted SSL certificates. OpenVAS Vulnerability Tes...
DSA-3245-1 ruby1.8 - security update
Bulletin has no description...
DSA-3243-1 libxml-libxml-perl - security update
Bulletin has no description...
Debian Security Advisory DSA 3243-1 (libxml-libxml-perl - security update)
Tilmann Haak from xing.com discovered that XML::LibXML, a Perl interface to the libxml2 library, did not respect the expandentities parameter to disable processing of external entities in some circumstances. This may allow attackers to gain read access to otherwise protected resources, depending ...
DLA-202-1 wesnoth-1.8 - security update
Bulletin has no description...
DLA-199-1 libx11 - security update
Bulletin has no description...
Debian DLA-185-1 : freetype security update
Mateusz Jurczyk discovered multiple vulnerabilities in Freetype. Opening malformed fonts may result in denial of service or the execution of arbitrary code. For the oldstable distribution squeeze, these problems have been fixed in version 2.4.2-2.1+squeeze5. For the stable distribution wheezy,...
Debian DLA-113-1 : bsd-mailx security update
It was discovered that bsd-mailx, an implementation of the 'mail' command, had an undocumented feature which treats syntactically valid email addresses as shell commands to execute. Users who need this feature can re-enable it using the 'expandaddr' in an appropriate mailrc file. This update also...
Debian DLA-158-1 : request-tracker3.8 security update
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2014-9472 Christian Loos discovered a remote denial of service vulnerability, exploitable via th...
Debian DLA-114-1 : heirloom-mailx security update
Two security vulnerabilities were discovered in Heirloom mailx, an implementation of the 'mail' command : CVE-2004-2771 mailx interprets interprets shell meta-characters in certain email addresses. CVE-2014-7844 An unexpected feature of mailx treats syntactically valid email addresses as shell...
[SECURITY] [DLA 113-1] bsd-mailx security update
Package : bsd-mailx Version : 8.1.2-0.20100314cvs-1+deb6u1 CVE ID : CVE-2014-7844 It was discovered that bsd-mailx, an implementation of the "mail" command, had an undocumented feature which treats syntactically valid email addresses as shell commands to execute. Users who need this feature can...
DLA-114-1 heirloom-mailx - security update
Bulletin has no description...
DLA-113-1 bsd-mailx - security update
Bulletin has no description...
Debian DSA-2953-1 : dpkg - security update
Multiple vulnerabilities were discovered in dpkg that allow file modification through path traversal when unpacking source packages with specially crafted patch files. This update had been scheduled before the end of security support for the oldstable distribution squeeze, hence an exception has...
Debian Security Advisory DSA 2953-1 (dpkg - security update)
Multiple vulnerabilities were discovered in dpkg that allow file modification through path traversal when unpacking source packages with specially crafted patch files. This update had been scheduled before the end of security support for the oldstable distribution squeeze, hence an exception has...