Mandrake Linux Security Advisory : ethereal (MDKSA-2004:024)

A number of serious issues have been discovered in versions of Ethereal prior to 0.10.2. Stefan Esser discovered thirteen buffer overflows in the NetFlow, IGAP, EIGRP, PGM, IrDA, BGP, ISUP, and TCAP dissectors. Jonathan Heusser discovered that a carefully-crafted RADIUS packet could cause Etherea...

Mandrake Linux Security Advisory : sox (MDKSA-2004:076)

Ulf Harnhammar discovered two buffer overflows in SoX. They occur when the sox or play commands handle malicious .WAV files. Versions 12.17.4, 12.17.3 and 12.17.2 are vulnerable to these overflows. 12.17.1, 12.17 and 12.16 are some versions that are not. %NASLMINLEVEL 70300 C Tenable Network...

Samba: Multiple buffer overflows

Background Samba is a package which allows nix systems to act as file servers for Windows computers. It also allows nix systems to mount shares exported by a Samba/CIFS/Windows server. The Samba Web Administration Tool SWAT is a web-based configuration tool part of the Samba package. Description...

Fedora Core 1 : sox-12.17.4-4.fc1 (2004-235)

Updated sox packages that fix buffer overflows in the WAV file handling code are now available. Buffer overflows existed in the parsing of WAV file header fields. It was possible that a malicious WAV file could have caused arbitrary code to be executed when the file was played or converted. Note...

SUSE-SA:2002:039: syslog-ng

The remote host is missing the patch for the advisory SUSE-SA:2002:039 syslog-ng. The syslog-ng package is a portable syslog implementation which can be used as syslogd replacement. Syslog-ng contained buffer overflows in its macro expansion routines. These overflows could be triggered by remote...

SUSE-SA:2002:047: OpenLDAP2

The remote host is missing the patch for the advisory SUSE-SA:2002:047 OpenLDAP2. OpenLDAP is the Open Source implementation of the Lightweight Directory Access Protocol LDAP and is used in network environments for distributing certain information such as X.509 certificates or login information...

SUSE-SA:2003:0006: dhcp

The remote host is missing the patch for the advisory SUSE-SA:2003:0006 dhcp. The ISC Internet Software Consortium dhcp package is an imple- mentation of the 'Dynamic Host Configuration Protocol' DHCP. An internal source code audit done by ISC revealed several buffer overflows in the code which i...

SuSE-SA:2004:006: xf86/XFree86

The remote host is missing the patch for the advisory SuSE-SA:2004:006 xf86/XFree86. XFree86 is an open source X Window System implementation that acts as a client-server-based API between different hardware components like display, mouse, keyboard and so on. Several buffer overflows were found i...

SUSE-SA:2002:034: heimdal

The remote host is missing the patch for the advisory SUSE-SA:2002:034 heimdal. The Heimdal package is a free Kerberos implementation offering flexible authentication mechanisms based on the Kerberos 5 and Kerberos 4 scheme. The SUSE Security Team has reviewed critical parts of the Heimdal packag...

Fedora Core 1 : mc-4.6.0-14.10 (2004-112)

Several buffer overflows, several temporary file creation vulnerabilities, and one format string vulnerability have been discovered in Midnight Commander. These vulnerabilities were discovered mostly by Andrew V. Samoilov and Pavel Roskin. The Common Vulnerabilities and Exposures project...

Fedora Core 1 : lha-1.14i-12.1 (2004-119)

Ulf Harnhammar discovered two stack-based buffer overflows and two directory traversal flaws in LHA. An attacker could exploit the buffer overflows by creating a carefully crafted LHA archive in such a way that arbitrary code would be executed when the archive is tested or extracted by a victim...

Multiple bugs in Ethereal

DoS and buffer overflows on different protocols parsing...

FreeBSD : metamail format string bugs and buffer overflows (108)

The following package needs to be updated: metamail %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga20082c3625511d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : multiple buffer overflows in xboing (203)

The following package needs to be updated: xboing %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkge25566d56d3f11d883a4000a95bc6fae.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : ecartis buffer overflows and input validation bugs (38)

The following package needs to be updated: ecartis %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3e9be8c4819211d896450020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : kdelibs (RHSA-2002:221)

A number of vulnerabilities have been found that affect various versions of KDE. This errata provides updates for these issues. KDE is a graphical desktop environment for workstations. A number of vulnerabilities have been found in various versions of KDE. The SSL capability for Konqueror in KDE...

RHEL 2.1 / 3 : ethereal (RHSA-2004:136)

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. Stefan Esser reported that Ethereal versions 0.10.1 and earlier contain stack overflows in the IGRP, PGM, Metflow, ISUP, TCAP, or IGAP dissectors. On a syst...

FreeBSD : Buffer overflows in XFree86 servers (206)

The following package needs to be updated: XFree86-Server %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3837f4625d6b11d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyrigh...

FreeBSD : Several remotely exploitable buffer overflows in gaim (52)

The following package needs to be updated: gaim %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg6fd024395d7011d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...

RHEL 3 : gaim (RHSA-2004:033)

Updated Gaim packages that fix a number of serious vulnerabilities are now available. Gaim is an instant messenger client that can handle multiple protocols. Stefan Esser audited the Gaim source code and found a number of bugs that have security implications. Due to the nature of instant messagin...