[SECURITY] [DSA 689-1] New mod_python packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 689-1 [email protected] http://www.debian.org/security/ Martin Schulze February 23rd, 2005 http://www.debian.org/security/faq -...

Knox Arkeia Network Backup Agent Default Account

The remote host is running Arkeia Network Backup agent, used for backups of the remote host. The remote version of this agent contains a default account that may allow an attacker to gain read/write arbitrary files on the remote system with the privileges of the Arkeia daemon, usually root. C...

MercuryBoard Forum 1.0/1.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/12578/info A remote cross-site scripting vulnerability affects the 'forum.php' script of MercuryBoard. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content. A...

HP-UX PHSS_31068 : HP-UX Running Serviceguard, Remote Increase in Privilege (HPSBUX01080 SSRT3526 rev.2)

s700800 11.23 MC/ServiceGuard A.11.15.00 : A potential security vulnerability has been identified with HP Serviceguard running on HP-UX and Linux that may allow remote unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugi...

[SECURITY] [DSA 680-1] New htdig packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 680-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

vBulletin forumdisplay.php comma Parameter Arbitrary Command Execution

The remote version of vBulletin is vulnerable to a remote command execution flaw through the script 'forumdisplay.php'. A malicious user could exploit this flaw to execute arbitrary commands on the remote host with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 678-1] New netkit-rwho packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 678-1 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 674-2] New mailman packages really fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 674-2 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 671-1 [email protected] http://www.debian.org/security/ Martin Schulze February 8th, 2005 http://www.debian.org/security/faq -...

ngIRCd <= v0.8.2 Format String Vulnerability

------------------------------------------------- No System Group - Advisory 11 - 03/02/05 ------------------------------------------------- Program: ngIRCd Homepage: http://arthur.ath.cx/alex/ngircd/ Operating System: Linux and Unix-Compatible Vulnerable Versions: ngIRCd v0.8.2 and prior Risk:...

WarFTPd CWD Command Remote DoS

The remote host is running War FTP Daemon, an FTP server for Windows. The remote version of this software is prone to a remote denial of service vulnerability. An attacker may exploit this flaw to crash the remote service. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription...

[SECURITY] [DSA 656-1] New vdr packages fix insecure file access

-------------------------------------------------------------------------- Debian Security Advisory DSA 656-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

Debian DSA-654-1 : enscript - several vulnerabilities

Erik Sjolund has discovered several security relevant problems in enscript, a program to convert ASCII text into Postscript and other formats. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2004-1184 Unsanitised input can cause the execution of...

Citadel/UX select() Bitmap Array Index Remote Oerflow

The remote host is running Citadel/UX, a messaging server for Unix. The remote version of this software is vulnerable to a buffer overflow when performing a select system call while providing very high file descriptors. A remote attacker may exploit this flaw to modify at least one byte in memory...

multiple applications fd_set structure bitmap array index overflow

Issue: Multiple applications fdset structure bitmap array index overflow Type: remote Date: December, 12 2004 Original URL: http://www.security.nnov.ru/advisiories/sockets.asp Author: 3APA3A URL: http://www.security.nnov.ru/ Affected: gnugk 2.2.0 confirmed, fixed by vendor gnugk is OpenH323...

[SECURITY] [DSA 653-1] New ethereal packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 653-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 648-1] New xpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 648-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 643-1] New queue packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 643-1 [email protected] http://www.debian.org/security/ Martin Schulze January 18th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 643-1] New queue packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 643-1 [email protected] http://www.debian.org/security/ Martin Schulze January 18th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 643-1] New queue packages fix buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 643-1 [email protected] http://www.debian.org/security/ Martin Schulze January 18th, 2005 http://www.debian.org/security/faq -...