Debian Security Advisory DSA 1149-1 (ncompress)

The remote host is missing an update to ncompress announced via advisory DSA 1149-1. Tavis Ormandy from the Google Security Team discovered a missing boundary check in ncompress, the original Lempel-Ziv compress and uncompress programs, which allows a specially crafted datastream to underflow a...

Debian Security Advisory DSA 310-1 (xaos)

The remote host is missing an update to xaos announced via advisory DSA 310-1. OpenVAS Vulnerability Test $Id: deb3101.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 310-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 592-1 (ez-ipupdate)

The remote host is missing an update to ez-ipupdate announced via advisory DSA 592-1. OpenVAS Vulnerability Test $Id: deb5921.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 592-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 869-1 (eric)

The remote host is missing an update to eric announced via advisory DSA 869-1. The developers of eric, a full featured Python IDE, have fixed a bug in the processing of project files that could lead to the execution of arbitrary code. The old stable distribution woody does not contain an eric...

Debian Security Advisory DSA 579-1 (abiword)

The remote host is missing an update to abiword announced via advisory DSA 579-1. OpenVAS Vulnerability Test $Id: deb5791.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 579-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 764-1 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 764-1. Several vulnerabilities have been discovered in cacti, a round-robin database RRD tool that helps create graphs from database information. The Common Vulnerabilities and Exposures Project identifies the following...

Debian Security Advisory DSA 1378-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1378-1. OpenVAS Vulnerability Test $Id: deb13781.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1378-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 964-1 (gnocatan)

The remote host is missing an update to gnocatan announced via advisory DSA 964-1. A problem has been discovered in gnocatan, the computer version of the settlers of Catan boardgame, that can lead the server an other clients to exit via an assert, and hence does not permit the execution of...

Debian Security Advisory DSA 805-1 (apache2)

The remote host is missing an update to apache2 announced via advisory DSA 805-1. Several problems have been discovered in Apache2, the next generation, scalable, extendable web server. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1268 Marc Stern...

Debian Security Advisory DSA 691-1 (abuse)

The remote host is missing an update to abuse announced via advisory DSA 691-1. OpenVAS Vulnerability Test $Id: deb6911.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 691-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 099-1 (XChat)

The remote host is missing an update to XChat announced via advisory DSA 099-1. OpenVAS Vulnerability Test $Id: deb0991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 099-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 810-1 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 810-1. Several problems have been discovered in Mozilla, the we browser of the Mozilla suite. Since the usual praxis of backporting apparently does not work for this package, this update is basically version 1.7.10 with th...

Debian Security Advisory DSA 619-1 (xpdf)

The remote host is missing an update to xpdf announced via advisory DSA 619-1. OpenVAS Vulnerability Test $Id: deb6191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 619-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 102-2 (at)

The remote host is missing an update to at announced via advisory DSA 102-2. OpenVAS Vulnerability Test $Id: deb1022.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 102-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1150-1 (shadow)

The remote host is missing an update to shadow announced via advisory DSA 1150-1. A bug has been discovered in several packages that execute the setuid system call without checking for success when trying to drop privileges, which may fail with some PAM configurations. OpenVAS Vulnerability Test...

MyBB forumdisplay.php 'sortby' Parameter Arbitrary PHP Code Execution

The version of MyBB installed on the remote host is affected by an arbitrary PHP code execution vulnerability due to improper sanitization of user-supplied input to the 'sortby' parameter of the forumdisplay.php script before using it in an eval statement to evaluate PHP code. A remote,...

GLSA-200801-02 : R: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-02 R: Multiple vulnerabilities R includes a copy of PCRE which is vulnerable to multiple buffer overflows and memory corruptions vulnerabilities GLSA 200711-30. Impact : An attacker could entice a user to process specially...

PortalApp forums.asp sortby Parameter SQL Injection

The remote host is running PortalApp, a CMS and portal system written in ASP. The version of PortalApp installed on the remote host fails to sanitize input to the 'sortby' parameter of the 'forums.asp' script before using it in a database query. An unauthenticated attacker may be able to exploit...

Bitweaver wiki/edit.php suck_url Parameter Traversal Source Code Disclosure

The remote host is running Bitweaver, an open source content management system written in PHP. The version of this software installed on the remote host fails to sanitize input to the 'suckurl' parameter of the 'wiki/edit.php' script of directory traversal sequences. An unauthenticated attacker c...

Site@School slideshow_full.php album_name Parameter SQL Injection

The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'albumname' parameter of the 'starnet/addons/slideshowfull.php' script...