Debian DSA-108-1 : wmtv - symlink vulnerability

Nicolas Boullis found some security problems in the wmtv package a dockable video4linux TV player for windowmaker which is distributed in Debian GNU/Linux 2.2. With the current version of wmtv, the configuration file is written back as the superuser, and without any further checks. A malicious us...

Debian DSA-326-1 : orville-write - buffer overflows

Orville Write, a replacement for the standard write1 command, contains a number of buffer overflows. These could be exploited to gain either gid tty or root privileges, depending on the configuration selected when the package is installed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-165-1 : postgresql - buffer overflows

Mordred Labs and others found several vulnerabilities in PostgreSQL, an object-relational SQL database. They are inherited from several buffer overflows and integer overflows. Specially crafted long date and time input, currency, repeat data and long timezone names could cause the PostgreSQL serv...

Debian DSA-231-1 : dhcp3 - stack overflows

The Internet Software Consortium discovered several vulnerabilities during an audit of the ISC DHCP Daemon. The vulnerabilities exist in error handling routines within the minires library and may be exploitable as stack overflows. This could allow a remote attacker to execute arbitrary code under...

Debian DSA-187-1 : apache - several vulnerabilities

According to David Wagner, iDEFENSE and the Apache HTTP Server Project, several remotely exploitable vulnerabilities have been found in the Apache package, a commonly used webserver. These vulnerabilities could allow an attacker to enact a denial of service against a server or execute a cross...

CVE-2003-1050

Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to 1 db2start, 2 db2stop, or 3 db2govd...

MDaemon buffer overflows

Buffer overflows in multiple SMTP and IMAP commands...

Multiple ActivePost bugs

Buffer overflows, directory traversal, weak password encryption...

CVE-2004-0688

The OpenMotif-related entries include CVE-2004-0687 and CVE-2004-0688, with multiple OpenMotif packages (e.g., openmotif, openmotif-libs, openmotif-devel) listed in several advisories. Ubuntu/USN-27-1 and Red Hat/SUSE advisories reference these CVEs alongside broader OpenMotif fixes, indicating t...

CVE-2004-0827

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via malformed 1 AVI, 2 BMP, or 3 DIB files...

CVE-2004-0688

Multiple integer overflows in 1 the xpmParseColors function in parse.c, 2 XpmCreateImageFromXpmImage, 3 CreateXImage, 4 ParsePixels, and 5 ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file...

GLSA-200409-30 : xine-lib: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200409-30 xine-lib: Multiple vulnerabilities xine-lib contains two stack-based overflows and one heap-based overflow. In the code reading VCD disc labels, the ISO disc label is copied into an unprotected stack buffer of fixed size...

GLSA-200409-26 : Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200409-26 Mozilla, Firefox, Thunderbird, Epiphany: New releases fix vulnerabilities Mozilla-based products are vulnerable to multiple security issues. Firstly, routines handling the display of BMP images and VCards contain an...

CVE-2004-0827

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via malformed 1 AVI, 2 BMP, or 3 DIB files...

DEBIAN-CVE-2004-0827

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via malformed 1 AVI, 2 BMP, or 3 DIB files...

DSA-547-1 imagemagick - buffer overflows

Bulletin has no description...

MyServer multiple bugs

Multiple buffer overflows, directory travrsal, etc...

security flaw

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file...

gdk-pixbuf -- image decoding vulnerabilities

Chris Evans discovered several flaws in the gdk-pixbuf XPM image decoder: Heap-based overflow in pixbufcreatefromxpm Stack-based overflow in xpmextractcolor Integer overflows in io-ico.c Some of these flaws are believed to be exploitable...

[RLSA_02-2004] QNX Photon multiple buffer overflows

rfdslabs security advisory Title: QNX Photon multiple buffer overflows RLSA02-2004 Versions: QNX RTP 6.1 possibly others Vendor: QNX Software Systems http://www.qnx.com Date: 13 Sep 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction QNX Photon microGUI is the windowing system ...