Mandrake Linux Security Advisory : cpio (MDKSA-2005:032-1)

A vulnerability in cpio was discovered where cpio would create world- writeable files when used in -o/--create mode and giving an output file with -O. This would allow any user to modify the created cpio archive. The updated packages have been patched so that cpio now respects the current umask...

Fedora Core 2 : xpdf-3.00-3.8 (2005-135)

Wed Feb 09 2005 Than Ngo 1:3.00-3.8 - More fixing of CVE-2004-0888 patch bug 135393, 147524 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Debian DSA-672-1 : xview - buffer overflows

Erik Sjolund discovered that programs linked against xview are vulnerable to a number of buffer overflows in the XView library. When the overflow is triggered in a program which is installed setuid root a malicious user could perhaps execute arbitrary code as privileged user. %NASLMINLEVEL 70300 ...

Fedora Core 3 : xpdf-3.00-10.4 (2005-136)

Wed Feb 09 2005 Than Ngo 1:3.00-10.4 - More fixing of CVE-2004-0888 patch bug 135393, 147524 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Mandrake Linux Security Advisory : imap (MDKSA-2005:026)

A vulnerability was discovered in the CRAM-MD5 authentication in UW-IMAP where, on the fourth failed authentication attempt, a user would be able to access the IMAP server regardless. This problem exists only if you are using CRAM-MD5 authentication and have an /etc/cram-md5.pwd file. This is not...

Mandrake Linux Security Advisory : cups (MDKSA-2005:018)

A buffer overflow vulnerability was discovered in the xpdf PDF code, which could allow for arbitrary code execution as the user viewing a PDF file. The vulnerability exists due to insufficient bounds checking while processing a PDF file that provides malicious values in the /Encrypt /Length tag...

Mandrake Linux Security Advisory : koffice (MDKSA-2005:019)

A buffer overflow vulnerability was discovered in the xpdf PDF code, which could allow for arbitrary code execution as the user viewing a PDF file. The vulnerability exists due to insufficient bounds checking while processing a PDF file that provides malicious values in the /Encrypt /Length tag...

RHEL 3 : xpdf (RHSA-2005:059)

Updated Xpdf package that fixes a stack based buffer overflow security issue is now available. Xpdf is an X Window System based viewer for Portable Document Format PDF files. A buffer overflow flaw was found when processing the /Encrypt /Length tag. An attacker could construct a carefully crafted...

[SECURITY] [DSA 648-1] New xpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 648-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...

Debian DSA-646-1 : imagemagick - buffer overflow

Andrei Nigmatulin discovered a buffer overflow in the PSD image-decoding module of ImageMagick, a commonly used image manipulation library. Remote exploitation with a carefully crafted image could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-643-1 : queue - buffer overflows

'jaguar' of the Debian Security Audit Project has discovered several buffer overflows in queue, a transparent load balancing system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-643. Th...

[SECURITY] [DSA 639-1] New mc packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 639-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 632-1] New linpopup packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 632-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 631-1] New kdlibs packages fix arbitrary FTP command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 631-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2005 http://www.debian.org/security/faq -...

Fedora Core 3 : libtiff-3.6.1-9.fc3 (2005-598)

The updated libtiff package fixes an integer overflow which could lead to a buffer overflow in the tiffdump utility. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Mandrake Linux Security Advisory : vim (MDKSA-2005:003)

Several 'modeline'-related vulnerabilities were discovered in Vim by Ciaran McCreesh. The updated packages have been patched with Bram Moolenaar's vim 6.3.045 patch which fixes the reported vulnerabilities and adds more conservative 'modeline' rights. %NASLMINLEVEL 70300 C Tenable Network Securit...

[SECURITY] [DSA 624-1] New zip packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 624-1 [email protected] http://www.debian.org/security/ Martin Schulze January 5th, 2004 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : cups (MDKSA-2004:164)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0 and several programs, like cups, which use embedded xpdf code. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated packages a...

[SECURITY] [DSA 621-1] New CUPS packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 621-1 [email protected] http://www.debian.org/security/ Martin Schulze December 31st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 619-1] New xpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 619-1 [email protected] http://www.debian.org/security/ Martin Schulze December 30th, 2004 http://www.debian.org/security/faq -...