Fcron: Multiple vulnerabilities

Background Fcron is a command scheduler with extended capabilities over cron and anacron. Description Due to design errors in the fcronsighup program, Fcron may allow a local user to bypass access restrictions CAN-2004-1031, view the contents of root owned files CAN-2004-1030, remove arbitrary...

USN-10-1: XML library vulnerabilities

Several buffer overflows have been discovered in libxml2's FTP connection and DNS resolution functions. Supplying very long FTP URLs or IP addresses might result in execution of arbitrary code with the privileges of the process using libxml2. Since libxml2 is used in packages like php4-imagick, t...

inetutils tftp client buffer overflow

Buffer overflow during name resolution...

libxml2 multiple buffer overflows

Buffer overflow on URL parsing, name resolution...

libxml2 remote buffer overflows (not in xml parsing code though)

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Subject: libXML remotely exploitable buffer overflows. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Product Description: Libxml2 is the XML C parser and toolkit developed for the Gno...

[Security Bulletin] SSRT4807 HP-UX stmkfont local unauthorized privileged access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01088 REVISION: 0 SSRT4807 rev.0 HP-UX stmkfont local unauthorized privileged access NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in this...

Ghostscript: Insecure temporary file use in multiple scripts

Background Ghostscript is a software package providing an interpreter for the PostScript language and the PDF file format. It also provides output drivers for various file formats and printers. Description The pj-gs.sh, ps2epsi, pv.sh and sysvlp.sh scripts create temporary files in world-writeabl...

WordPress: HTTP response splitting and XSS vulnerabilities

Background WordPress is a PHP and MySQL based content management and publishing system. Description Due to the lack of input validation in the administration panel scripts, WordPress is vulnerable to HTTP response splitting and cross-site scripting attacks. Impact A malicious user could inject...

CUPS: Leakage of sensitive information

Background The Common UNIX Printing System CUPS is a cross-platform print spooler. Description When printing to a SMB-shared printer requiring authentication, CUPS leaks the user name and password to a logfile. Impact A local user could gain knowledge of sensitive authentication data. Workaround...

NetKit-telnetd: buffer overflows in telnet and telnetd

Background NetKit-telnetd is a standard Linux telnet client and server from the NetKit utilities. Description A possible buffer overflow exists in the parsing of option strings by the telnet daemon, where proper bounds checking is not applied when writing to a buffer. Additionaly, another possibl...

[security bulletin] SSRT4794 rev.0 HPStorageWorks Command View XP access restriction bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBST01071 REVISION: 0 SSRT4794 rev.0 HP StorageWorks Command View XP access restriction bypass NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...

X.org, XFree86: Integer and stack overflows in libXpm

Background XFree86 and X.org are both implementations of the X Window System. Description Chris Evans has discovered multiple integer and stack overflow vulnerabilities in the X Pixmap library, libXpm, which is a part of the X Window System. These overflows can be exploited by the execution of a...

[Full-Disclosure] myServer 0.7 Directory Traversal Vulnerability

myServer 0.7 Directory Traversal Vulnerability .oO Overview Oo. myServer version 0.7 shows files and directories that reside outside the normal web root directory. Discovered on 2004, September 07th Vendor: Myserver http://www.myserverproject.net/forum/portal.php MyServer is a free, powerful web...

star: Suid root vulnerability

Background star is an enhanced tape archiver, much like tar, that is recognized for it's speed as well as it's enhanced mt/rmt support. Description A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact Attackers with local user level...

Squid: Denial of service when using NTLM authentication

Background Squid is a full-featured Web Proxy Cache designed to run on Unix systems. It supports proxying and caching of HTTP, FTP, and other URLs, as well as SSL support, cache hierarchies, transparent caching, access control lists and many other features. Description Squid 2.5.x versions contai...

Mandrake Linux Security Advisory : glibc (MDKSA-2002:050)

A buffer overflow vulnerability was found in the way that the glibc resolver handles the resolution of network names and addresses via DNS in glibc versions 2.2.5 and earlier. Only systems using the 'dns' entry in the 'networks' database in /etc/nsswitch.conf are vulnerable to this issue. By...

Mandrake Linux Security Advisory : xchat (MDKSA-2002:051)

In versions of the xchat IRC client prior to version 1.8.9, xchat does not filter the response from an IRC server when a /dns query is executed. xchat resolves hostnames by passing the configured resolver and hostname to a shell, so an IRC server may return a malicious response formatted so that...

[security bulletin] SSRT4773 HP-UX xfs and stmkfont remote unauthorized access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01061 REVISION: 0 TITLE: SSRT4773 rev.0 HP-UX xfs and stmkfont remote unauthorized access NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...

serenaTeam.txt

Serena Software's TeamTrack Sensitive Content Disclosure Summary "Serena TeamTrack is a Web-architected, secure and highly configurable enterprise process management solution". We have discovered a security flaw with which a remote attacker can disclosure sensitive information off a TeamTrack...

Fedora Core 1 : ethereal-0.10.0a-0.1 (2003-040)

Serious issues have been discovered in the following protocol dissectors : - Selecting 'Match-Selected' or 'Prepare-Selected' for a malformed SMB packet could cause a segmentation fault. - It is possible for the Q.931 dissector to dereference a NULL pointer when reading a malformed packet. Impact...