Important: Red Hat Security Advisory: sox security update

Updated sox packages that fix buffer overflows in the WAV file handling code are now available. SoX Sound eXchange is a sound file format converter. SoX can convert between many different digitized sound formats and perform simple sound manipulation functions, including sound effects. Buffer...

Samba: Multiple buffer overflows

Background Samba is a package which allows nix systems to act as file servers for Windows computers. It also allows nix systems to mount shares exported by a Samba/CIFS/Windows server. The Samba Web Administration Tool SWAT is a web-based configuration tool part of the Samba package. Description...

[ GLSA 200407-19 ] Pavuk: Digest authentication helper buffer overflow

Gentoo Linux Security Advisory GLSA 200407-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

SUSE-SA:2002:047: OpenLDAP2

The remote host is missing the patch for the advisory SUSE-SA:2002:047 OpenLDAP2. OpenLDAP is the Open Source implementation of the Lightweight Directory Access Protocol LDAP and is used in network environments for distributing certain information such as X.509 certificates or login information...

SuSE-SA:2004:013: cvs

The remote host is missing the patch for the advisory SuSE-SA:2004:013 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. Stefan Esser reported buffer overflow conditions within the cvs program. They allow remote attackers to...

SUSE-SA:2003:029: pptpd

The remote host is missing the patch for the advisory SUSE-SA:2003:029 pptpd. The PPTP daemon contains a remotely exploitable buffer overflow which was introduced due to a integer overflow in the third argument passed to the read library call. This bug has been fixed. Since there is no workaround...

SUSE-SA:2003:037: pine

The remote host is missing the patch for the advisory SUSE-SA:2003:037 pine. The well known and widely used mail client pine is vulnerable to a buffer overflow. The vulnerability exists in the code processing 'message/external-body' type messages. It allows remote attackers to execute arbitrary...

Solaris 9 (sparc) : 116340-09

SunOS 5.9: gzip and Freeware info files patch. Date this patch was last updated by Sun : May/05/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Fedora Core 1 : lftp (2003-034)

Ulf Harnhammar found a remotely-triggerable buffer overflow in lftp. An attacker could create a carefully crafted directory on a website such that, if a user connects to that directory using the lftp client and subsequently issues a 'ls' or 'rels' command, the attacker could execute arbitrary cod...

Security Release - Samba 3.0.5 and 2.2.10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Summary: Potential Buffer Overruns in Samba 3.0 and Samba 2.2 CVE ID: CAN-2004-0600, CAN-2004-0686 http://cve.mitre.org/ - ------------- CAN-2004-0600 - ------------- Affected Versions: = v3.0.2 The internal routine used by the Samba Web Administratio...

l2tpd: Buffer overflow

Background l2tpd is a GPL implentation of the Layer 2 Tunneling Protocol. Description Thomas Walpuski discovered a buffer overflow that may be exploitable by sending a specially crafted packet. In order to exploit the vulnerable code, an attacker would need to fake the establishment of an L2TP...

Opera: Multiple spoofing vulnerabilities

Background Opera is a multi-platform web browser. Description Opera fails to remove illegal characters from an URI of a link and to check that the target frame of a link belongs to the same website as the link. Opera also updates the address bar before loading a page. Additionally, Opera contains...

[SECURITY] [DSA 530-1] New l2tpd packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 530-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...

DSA-528 ethereal - denial of service

Bulletin has no description...

Microsoft Security Bulletin MS04-022 Vulnerability in Task Scheduler Could Allow Code Execution (841873)

Microsoft Security Bulletin MS04-022 Vulnerability in Task Scheduler Could Allow Code Execution 841873 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

Solaris 7 (sparc) : 107887-10

CDE 1.3: Actions Patch. Date this patch was last updated by Sun : Oct/31/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 2.5.1 (x86) : 108659-02

SunOS 5.5.1x86: Patch for sadmind. Date this patch was last updated by Sun : Feb/18/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (x86) : 106640-07

SunOS 5.6x86: rpcmod patch. Date this patch was last updated by Sun : Sep/05/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 2.6 (sparc) : 105667-03

SunOS 5.6: /usr/bin/rdist patch. Date this patch was last updated by Sun : Feb/21/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 108346-03

SunOS 5.6: patch usr/sbin/rpc.nispasswdd. Date this patch was last updated by Sun : Apr/14/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...