[SECURITY] [DSA 759-1] New phppgadmin packages fix directory traversal vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 759-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...

Debian DSA-759-1 : phppgadmin - missing input sanitising

A vulnerability has been discovered in phppgadmin, a set of PHP scripts to administrate PostgreSQL over the WWW, that can lead to disclose sensitive information. Successful exploitation requires that 'magicquotesgpc' is disabled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

DSA-759-1 phppgadmin - missing input sanitising

Bulletin has no description...

Debian DSA-739-1 : trac - missing input sanitising

Stefan Esser discovered an input validation flaw within Trac, a wiki and issue tracking system, that allows download/upload of files and therefore can lead to remote code execution in some configurations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Debian DSA-729-1 : php4 - missing input sanitising

An iDEFENSE researcher discovered two problems in the image processing functions of PHP, a server-side, HTML-embedded scripting language, of which one is present in woody as well. When reading a JPEG image, PHP can be tricked into an endless loop due to insufficient input validation. %NASLMINLEVE...

[SECURITY] [DSA 729-1] New PHP4 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 729-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0388

Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."...

CVE-2005-0388

Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."...

[SECURITY] [DSA 711-1] New info2www packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 711-1 [email protected] http://www.debian.org/security/ Martin Schulze April 19th, 2005 http://www.debian.org/security/faq -...

Debian DSA-711-1 : info2www - missing input sanitising

Nicolas Gregoire discovered a cross-site scripting vulnerability in info2www, a converter for info files to HTML. A malicious person could place a harmless looking link on the web that could cause arbitrary commands to be executed in the browser of the victim user. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] [DSA 708-1] New PHP3 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 708-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 708-1] New PHP3 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 708-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...

Debian DSA-708-1 : php3 - missing input sanitising

An iDEFENSE researcher discovered two problems in the image processing functions of PHP, a server-side, HTML-embedded scripting language, of which one is present in PHP3 as well. When reading a JPEG image, PHP can be tricked into an endless loop due to insufficient input validation. %NASLMINLEVEL...

Debian DSA-705-1 : wu-ftpd - missing input sanitising

Several denial of service conditions have been discovered in wu-ftpd, the popular FTP daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0256 Adam Zabrocki discovered a denial of service condition in wu-ftpd that could be exploited by a remote...

Debian DSA-704-1 : remstats - tempfile, missing input sanitising

Jens Steube discovered several vulnerabilities in remstats, the remote statistics system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0387 When processing uptime data on the unix-server a temporary file is opened in an insecure fashion which cou...

[SECURITY] [DSA 705-1] New wu-ftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 705-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 705-1] New wu-ftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 705-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 704-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 704-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0388

Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."...