[Full-Disclosure] [SECURITY] [DSA 420-1] New jitterbug packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 420-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2004 http://www.debian.org/security/faq -...

PHP Manpage lookup directory transversal / file disclosing

Hi ppl, Manpage Lookup is a PHP class that helps you to build a "manpage" frontend in php. It is powered by Andy http://php.amnuts.com. The script class.manpagelookup.php was vulnerable to a directory transversal bug because of leaks is input validation that could lead to disclose any readable by...

manpage.txt

Hi ppl, Manpage Lookup is a PHP class that helps you to build a "manpage" frontend in php. It is powered by Andy http://php.amnuts.com. The script class.manpagelookup.php was vulnerable to a directory transversal bug because of leaks is input validation that could lead to disclose any readable by...

[SECURITY] [DSA 418-1] New vbox3 packages fix privilege leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 418-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 7th, 2004 http://www.debian.org/security/faq -...

DSA-417 linux-kernel-2.4.18-powerpc+alpha - missing boundary check

Bulletin has no description...

[SECURITY] [DSA 412-1] New nd packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 412-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 410-1] New libnids packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 410-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 5th, 2004 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages are now available that fix a security vulnerability which may allow local users to gain root privileges. The Linux kernel handles the basic functions of the operating system. Paul Starzetz discovered a flaw in bounds checking in mremap in the Linux kernel versions 2.4.23 a...

DSA-410 libnids - buffer overflow

Bulletin has no description...

PHPCatalog id Parameter SQL Injection

The remote host appears to be running PHPCatalog, a CGI suite to handle on-line catalogues. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host. %NASLMINLEVEL 70300 C Tenable...

Moderate: Red Hat Security Advisory: lftp security update

Updated lftp packages are now available that fix a buffer overflow security vulnerability. lftp is a command-line file transfer program supporting FTP and HTTP protocols. Ulf Härnhammar discovered a buffer overflow bug in versions of lftp up to and including 2.6.9. An attacker could create a...

[SECURITY] [DSA 404-1] New rsync packages fix unauthorised remote code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 404-1 [email protected] http://www.debian.org/security/ Martin Schulze December 4th, 2003 http://www.debian.org/security/faq -...

glibc: getgrouplist buffer overflow vulnerability

Background glibc is the GNU C library. Description A bug in the getgrouplist function can cause a buffer overflow if the size of the group list is too small to hold all the user's groups. This overflow can cause segmentation faults in user applications. This vulnerability exists only when an...

Ethereal: security problems in ethereal 0.9.15

Background Ethereal is a popular network protocol analyzer. Description Ethereal contains buffer overflow vulnerabilities in the GTP, ISAKMP, and MEGACO protocol dissectors, and a heap overflow vulnerability in the SOCKS protocol dissector, which could cause Ethereal to crash or to execute...

DSA-402 minimalist - unsanitised input

Bulletin has no description...

Moderate: Red Hat Security Advisory: : Updated PostgreSQL packages fix buffer overflow

Updated PostgreSQL packages that correct a buffer overflow in the toascii routines are now available. PostgreSQL is an advanced Object-Relational database management system DBMS. Two bugs that can lead to buffer overflows have been found in the PostgreSQL abstract data type to ASCII conversion...

[CLA-2003:782] Conectiva Security Announcement - xinetd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : xinetd SUMMARY : Fixes for memory leaks and other...

Important: Red Hat Security Advisory: : Updated glibc packages provide security and bug fixes

Updated glibc packages that resolve vulnerabilities and address several bugs are now available. The glibc packages contain GNU libc, which provides standard system libraries. A bug in the getgrouplist function can cause a buffer overflow if the size of the group list is too small to hold all the...

Important: Red Hat Security Advisory: zebra security update

Updated zebra packages that close a locally-exploitable and a remotely-exploitable denial of service vulnerability are now available. Zebra an open source implementation of TCP/IP routing software. Jonny Robertson reported that Zebra can be remotely crashed if a Zebra password has been enabled an...

[OpenSSL Advisory] Denial of Service in ASN.1 parsing

-----BEGIN PGP SIGNED MESSAGE----- OpenSSL Security Advisory 4 November 2003 Denial of Service in ASN.1 parsing ================================== Previously, OpenSSL 0.9.6k was released on the 30 September 2003 to address various ASN.1 issues. The issues were found using a test suite from NISCC...