Fedora Core 3 : libtiff-3.6.1-9.fc3 (2005-598)

The updated libtiff package fixes an integer overflow which could lead to a buffer overflow in the tiffdump utility. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Mandrake Linux Security Advisory : vim (MDKSA-2005:003)

Several 'modeline'-related vulnerabilities were discovered in Vim by Ciaran McCreesh. The updated packages have been patched with Bram Moolenaar's vim 6.3.045 patch which fixes the reported vulnerabilities and adds more conservative 'modeline' rights. %NASLMINLEVEL 70300 C Tenable Network Securit...

[SECURITY] [DSA 624-1] New zip packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 624-1 [email protected] http://www.debian.org/security/ Martin Schulze January 5th, 2004 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : cups (MDKSA-2004:164)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0 and several programs, like cups, which use embedded xpdf code. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated packages a...

[SECURITY] [DSA 621-1] New CUPS packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 621-1 [email protected] http://www.debian.org/security/ Martin Schulze December 31st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 619-1] New xpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 619-1 [email protected] http://www.debian.org/security/ Martin Schulze December 30th, 2004 http://www.debian.org/security/faq -...

Debian DSA-615-1 : debmake - insecure temporary files

Javier Fernandez-Sanguino Pena from the Debian Security Audit Project noticed that the debstd script from debmake, a deprecated helper package for Debian packaging, created temporary directories in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by...

[SECURITY] [DSA 614-1] New xzgv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 614-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 611-1] New htget packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 611-1 [email protected] http://www.debian.org/security/ Martin Schulze December 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 609-1] New atari800 packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 609-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 604-1] New hpsockd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 604-1 [email protected] http://www.debian.org/security/ Martin Schulze December 3rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 603-1] New openssl packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 603-1 [email protected] http://www.debian.org/security/ Martin Schulze December 1st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 602-1] New libgd2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 602-1 [email protected] http://www.debian.org/security/ Martin Schulze November 29th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 601-1] New libgd1 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 601-1 [email protected] http://www.debian.org/security/ Martin Schulze November 29th, 2004 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : zip (MDKSA-2004:141)

A vulnerability in zip was discovered where zip would not check the resulting path length when doing recursive folder compression, which could allow a malicious person to convince a user to create an archive containing a specially crafted path name. By doing so, arbitrary code could be executed...

[SECURITY] [DSA 599-1] New tetex-bin packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 599-1 [email protected] http://www.debian.org/security/ Martin Schulze November 25th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 595-1] New bnc packages arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 595-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2004 http://www.debian.org/security/faq -...

Debian DSA-579-1 : abiword - buffer overflow

A buffer overflow vulnerability has been discovered in the wv library, used for converting and previewing word documents. On exploitation an attacker could execute arbitrary code with the privileges of the user running the vulnerable application. %NASLMINLEVEL 70300 C Tenable Network Security, In...

[SECURITY] [DSA 590-1] New gnats packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 590-1 [email protected] http://www.debian.org/security/ Martin Schulze November 9th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 589-1] New libgd1 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 589-1 [email protected] http://www.debian.org/security/ Martin Schulze November 9th, 2004 http://www.debian.org/security/faq -...