Fedora Core 2 : libpng10-1.0.15-8 (2004-238)

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During a source code audit, Chris Evans discovered several buffer overflows in libpng. An attacker could create a carefully crafted PNG file in such a way that it wou...

Critical: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix several issues are now available. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During a source code audit, Chris Evans discovered several buffer overflows in libpng. An attacker...

DSA-536 libpng - several vulnerabilities

Bulletin has no description...

Mandrake Linux Security Advisory : ethereal (MDKSA-2004:024)

A number of serious issues have been discovered in versions of Ethereal prior to 0.10.2. Stefan Esser discovered thirteen buffer overflows in the NetFlow, IGAP, EIGRP, PGM, IrDA, BGP, ISUP, and TCAP dissectors. Jonathan Heusser discovered that a carefully-crafted RADIUS packet could cause Etherea...

Mandrake Linux Security Advisory : sox (MDKSA-2004:076)

Ulf Harnhammar discovered two buffer overflows in SoX. They occur when the sox or play commands handle malicious .WAV files. Versions 12.17.4, 12.17.3 and 12.17.2 are vulnerable to these overflows. 12.17.1, 12.17 and 12.16 are some versions that are not. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : openldap (MDKSA-2003:006)

A review was completed by the SuSE Security Team on the OpenLDAP server software, and this audit revealed several buffer overflows and other bugs that remote attackers could exploit to gain unauthorized access to the system running the vulnerable OpenLDAP servers. Additionally, various locally...

Mandrake Linux Security Advisory : squid (MDKSA-2002:044)

Numerous security problems were fixed in squid-2.4.STABLE7. This releases has several bugfixes to the Gopher client to correct some security issues. Security fixes to how squid parses FTP directory listings into HTML have been implemented. A security fix to how squid forwards proxy authentication...

Mandrake Linux Security Advisory : mc (MDKSA-2004:039)

Several vulnerabilities in Midnight Commander were found by Jacub Jelinek. This includes several buffer overflows CVE-2004-0226, as well as a format string issue CVE-2004-0232, and an issue with temporary file and directory creation CVE-2004-0231. Most of the included fixes are backports from CVS...

Samba: Multiple buffer overflows

Background Samba is a package which allows nix systems to act as file servers for Windows computers. It also allows nix systems to mount shares exported by a Samba/CIFS/Windows server. The Samba Web Administration Tool SWAT is a web-based configuration tool part of the Samba package. Description...

Fedora Core 1 : sox-12.17.4-4.fc1 (2004-235)

Updated sox packages that fix buffer overflows in the WAV file handling code are now available. Buffer overflows existed in the parsing of WAV file header fields. It was possible that a malicious WAV file could have caused arbitrary code to be executed when the file was played or converted. Note...

SUSE-SA:2002:047: OpenLDAP2

The remote host is missing the patch for the advisory SUSE-SA:2002:047 OpenLDAP2. OpenLDAP is the Open Source implementation of the Lightweight Directory Access Protocol LDAP and is used in network environments for distributing certain information such as X.509 certificates or login information...

SUSE-SA:2003:0006: dhcp

The remote host is missing the patch for the advisory SUSE-SA:2003:0006 dhcp. The ISC Internet Software Consortium dhcp package is an imple- mentation of the 'Dynamic Host Configuration Protocol' DHCP. An internal source code audit done by ISC revealed several buffer overflows in the code which i...

SuSE-SA:2004:006: xf86/XFree86

The remote host is missing the patch for the advisory SuSE-SA:2004:006 xf86/XFree86. XFree86 is an open source X Window System implementation that acts as a client-server-based API between different hardware components like display, mouse, keyboard and so on. Several buffer overflows were found i...

SUSE-SA:2002:034: heimdal

The remote host is missing the patch for the advisory SUSE-SA:2002:034 heimdal. The Heimdal package is a free Kerberos implementation offering flexible authentication mechanisms based on the Kerberos 5 and Kerberos 4 scheme. The SUSE Security Team has reviewed critical parts of the Heimdal packag...

SUSE-SA:2002:039: syslog-ng

The remote host is missing the patch for the advisory SUSE-SA:2002:039 syslog-ng. The syslog-ng package is a portable syslog implementation which can be used as syslogd replacement. Syslog-ng contained buffer overflows in its macro expansion routines. These overflows could be triggered by remote...

Fedora Core 1 : mc-4.6.0-14.10 (2004-112)

Several buffer overflows, several temporary file creation vulnerabilities, and one format string vulnerability have been discovered in Midnight Commander. These vulnerabilities were discovered mostly by Andrew V. Samoilov and Pavel Roskin. The Common Vulnerabilities and Exposures project...

Fedora Core 1 : lha-1.14i-12.1 (2004-119)

Ulf Harnhammar discovered two stack-based buffer overflows and two directory traversal flaws in LHA. An attacker could exploit the buffer overflows by creating a carefully crafted LHA archive in such a way that arbitrary code would be executed when the archive is tested or extracted by a victim...

Multiple bugs in Ethereal

DoS and buffer overflows on different protocols parsing...

FreeBSD : Buffer overflows in XFree86 servers (206)

The following package needs to be updated: XFree86-Server %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3837f4625d6b11d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyrigh...

FreeBSD : metamail format string bugs and buffer overflows (108)

The following package needs to be updated: metamail %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga20082c3625511d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...