eGroupWare: Multiple XSS vulnerabilities

Background eGroupWare is a suite of web-based group applications including calendar, address book, messenger and email. Description Joxean Koret recently discovered multiple cross site scripting vulnerabilities in various modules for the eGroupWare suite. This includes the calendar, address book,...

Python 2.2: Buffer overflow in getaddrinfo()

Background Python is an interpreted, interactive, object-oriented, cross-platform programming language. Description If IPV6 is disabled in Python 2.2, getaddrinfo is not able to handle IPV6 DNS requests properly and a buffer overflow occurs. Impact An attacker can execute arbitrary code as the us...

IlohaMail user Parameter XSS

According to its banner, the remote web server is running IlohaMail version 0.8.10 or earlier. Such versions do not properly sanitize the 'user' parameter before using it to generate dynamic HTML output. An attacker may be able to leverage this to inject arbitrary HTML and script code into a user...

WS_FTP Server STAT Command Remote Overflow

According to its banner, the version of WSFTP running on the remote host has a buffer overflow vulnerability. Sending a 'STAT' command followed by a very long argument results in a buffer overflow. A remote attacker could exploit this to execute arbitrary code. C Tenable Network Security, Inc...

DSA-542-1 qt - unsanitised input

Bulletin has no description...

GLSA-200406-10 : Gallery: Privilege escalation vulnerability

The remote host is affected by the vulnerability described in GLSA-200406-10 Gallery: Privilege escalation vulnerability There is a vulnerability in the Gallery photo album software which may allow an attacker to gain administrator privileges within Gallery. A Gallery administrator has full acces...

GLSA-200406-16 : Apache 1.3: Buffer overflow in mod_proxy

The remote host is affected by the vulnerability described in GLSA-200406-16 Apache 1.3: Buffer overflow in modproxy A bug in the proxyutil.c file may lead to a remote buffer overflow. To trigger the vulnerability an attacker would have to get modproxy to connect to a malicous server which return...

GLSA-200405-12 : CVS heap overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-12 CVS heap overflow vulnerability Stefan Esser discovered a heap overflow in the CVS server, which can be triggered by sending malicious 'Entry' lines and manipulating the flags related to that Entry. This vulnerability wa...

GLSA-200405-08 : Pound format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-08 Pound format string vulnerability A format string flaw in the processing of syslog messages was discovered and corrected in Pound. Impact : This flaw may allow remote execution of arbitrary code with the rights of the...

GLSA-200404-13 : CVS Server and Client Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200404-13 CVS Server and Client Vulnerabilities There are two vulnerabilities in CVS; one in the server and one in the client. The server vulnerability allows a malicious client to request the contents of any RCS file to which the...

GLSA-200404-11 : Multiple Vulnerabilities in pwlib

The remote host is affected by the vulnerability described in GLSA-200404-11 Multiple Vulnerabilities in pwlib Multiple vulnerabilities have been found in the implementation of protocol H.323 contained in pwlib. Most of the vulnerabilies are in the parsing of ASN.1 elements which would allow an...

GLSA-200408-14 : acroread: UUDecode filename buffer overflow

The remote host is affected by the vulnerability described in GLSA-200408-14 acroread: UUDecode filename buffer overflow acroread contains two errors in the handling of UUEncoded filenames. First, it fails to check the length of a filename before copying it into a fixed size buffer and, secondly,...

GLSA-200407-12 : Linux Kernel: Remote DoS vulnerability with IPTables TCP Handling

The remote host is affected by the vulnerability described in GLSA-200407-12 Linux Kernel: Remote DoS vulnerability with IPTables TCP Handling An attacker can utilize an erroneous data type in the IPTables TCP option handling code, which lies in an iterator. By making a TCP packet with a header...

GLSA-200407-08 : Ethereal: Multiple security problems

The remote host is affected by the vulnerability described in GLSA-200407-08 Ethereal: Multiple security problems There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.5, including: In some cases the iSNS dissector could cause Ethereal to abort. If there was no policy name...

GLSA-200405-14 : Buffer overflow in Subversion

The remote host is affected by the vulnerability described in GLSA-200405-14 Buffer overflow in Subversion All releases of Subversion prior to 1.0.3 have a vulnerability in the date-parsing code. This vulnerability may allow denial of service or arbitrary code execution as the Subversion user. Bo...

GLSA-200408-06 : SpamAssassin: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200408-06 SpamAssassin: Denial of Service vulnerability SpamAssassin contains an unspecified Denial of Service vulnerability. Impact : By sending a specially crafted message an attacker could cause a Denial of Service attack again...

GLSA-200408-12 : Gaim: MSN protocol parsing function buffer overflow

The remote host is affected by the vulnerability described in GLSA-200408-12 Gaim: MSN protocol parsing function buffer overflow Sebastian Krahmer of the SuSE Security Team has discovered a remotely exploitable buffer overflow vulnerability in the code handling MSN protocol parsing. Impact : By...

GLSA-200408-21 : Cacti: SQL injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200408-21 Cacti: SQL injection vulnerability Cacti is vulnerable to a SQL injection attack where an attacker may inject SQL into the Username field. Impact : An attacker could compromise the Cacti service and potentially execute...

GLSA-200408-10 : gv: Exploitable Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200408-10 gv: Exploitable Buffer Overflow gv contains a buffer overflow vulnerability where an unsafe sscanf call is used to interpret PDF and PostScript files. Impact : By enticing a user to view a malformed PDF or PostScript fil...

GLSA-200406-18 : gzip: Insecure creation of temporary files

The remote host is affected by the vulnerability described in GLSA-200406-18 gzip: Insecure creation of temporary files The script gzexe included with gzip contains a bug in the code that handles tempfile creation. If the creation of a temp file fails when using gzexe fails instead of bailing out...