623 matches found
Debian DSA-925-1 : phpbb2 - several vulnerabilities
Several vulnerabilities have been discovered in phpBB, a fully featured and skinnable flat webforum. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3310 Multiple interpretation errors allow remote authenticated users to inject arbitrary web script...
Debian DSA-1152-1 : trac - missing input sanitising
Felix Wiemann discovered that trac, an enhanced Wiki and issue tracking system for software development projects, can be used to disclose arbitrary local files. To fix this problem, python-docutils needs to be updated as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
Debian DSA-1165-1 : capi4hylafax - missing input sanitising
Lionel Elie Mamane discovered a security vulnerability in capi4hylafax, tools for faxing over a CAPI 2.0 device, that allows remote attackers to execute arbitrary commands on the fax receiving system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian DSA-1098-1 : horde3 - missing input sanitising
Michael Marek discovered that the Horde web application framework performs insufficient input sanitising, which might lead to the injection of web script code through cross-site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
Debian DSA-1066-1 : phpbb2 - missing input sanitising
It was discovered that phpbb2, a web-based bulletin board, does insufficiently sanitise values passed to the 'Font Colour 3' setting, which might lead to the execution of injected code by admin users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian DSA-1061-1 : popfile - missing input sanitising
It has been discovered that popfile, a bayesian mail classifier, can be forced into a crash through malformed character sets within email messages, which allows denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Debian DSA-1006-1 : wzdftpd - missing input sanitising
'kcope' discovered that the wzdftpd FTP server lacks input sanitising for the SITE command, which may lead to the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
Debian DSA-1136-1 : gpdf - wrong input sanitising
'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which are also present in gpdf, the viewer with Gtk bindings, and which can lead to a denial of service by crashing the application or possibly to the execution of...
Debian DSA-963-1 : mydns - missing input sanitising
NISCC reported that MyDNS, a DNS server using a SQL database for data storage, can be tricked into an infinite loop by a remote attacker and hence cause a denial of service condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
[SECURITY] [DSA 1167-1] New apache packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1167-1 [email protected] http://www.debian.org/security/ Steve Kemp September 4th, 2005 http://www.debian.org/security/faq -...
DSA-1167-1 apache - missing input sanitising
Bulletin has no description...
[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...
DSA-1165 capi4hylafax - missing input sanitising
Bulletin has no description...
DSA-1152 trac - missing input sanitising
Bulletin has no description...
[SECURITY] [DSA 1147-1] New drupal packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 1147-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 9th, 2006 http://www.debian.org/security/faq -...
DSA-1147-1 drupal - missing input sanitising
Bulletin has no description...
DSA-1148-1 gallery - several vulnerabilities
Bulletin has no description...
[SECURITY] [DSA 1144-1] New chmlib packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1144-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 7th, 2006 http://www.debian.org/security/faq -...