[Full-disclosure] [SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 704-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...

DSA-705-1 wu-ftpd - missing input sanitising

Bulletin has no description...

[SECURITY] [DSA 700-1] New mailreader packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 700-1 [email protected] http://www.debian.org/security/ Martin Schulze March 30th, 2005 http://www.debian.org/security/faq -...

Debian DSA-700-1 : mailreader - missing input sanitising

Ulf Harnhammar from the Debian Security Audit Project discovered a cross-site scripting problem in mailreader, a simple, but powerful WWW mail reader system, when displaying messages of the MIME types text/enriched or text/richtext. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 694-1] New xloadimage packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 694-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

Debian DSA-694-1 : xloadimage - missing input sanitising, integer overflow

Several vulnerabilities have been discovered in xloadimage, an image viewer for X11. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0638 Tavis Ormandy of the Gentoo Linux Security Audit Team has reported a flaw in the handling of compressed images,...

DSA-694-1 xloadimage - missing input sanitising, integer overflow

Bulletin has no description...

Debian DSA-695-1 : xli - buffer overflow, input sanitising, integer overflow

Several vulnerabilities have been discovered in xli, an image viewer for X11. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2001-0775 A buffer overflow in the decoder for FACES format images could be exploited by an attacker to execute arbitrary code...

Debian DSA-690-1 : bsmtpd - missing input sanitising

Bastian Blank discovered a vulnerability in bsmtpd, a batched SMTP mailer for sendmail and postfix. Unsanitised addresses can cause the execution of arbitrary commands during alleged mail delivery. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

[SECURITY] [DSA 690-1] New bsmtpd packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 690-1 [email protected] http://www.debian.org/security/ Martin Schulze February 25th, 2005 http://www.debian.org/security/faq -...

DSA-690-1 bsmtpd - missing input sanitising

Bulletin has no description...

Debian DSA-650-1 : sword - missing input sanitising

Ulf Harnhammar discovered that due to missing input sanitising in diatheke, a CGI script for making and browsing a bible website, it is possible to execute arbitrary commands via a specially crafted URL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

[SECURITY] [DSA 650-1] New sword packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 650-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 650-1] New sword packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 650-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2005 http://www.debian.org/security/faq -...

DSA-650-1 sword - missing input sanitising

Bulletin has no description...

[SECURITY] [DSA 564-1] New mpg123 packages fix arbitrary code exceution

-------------------------------------------------------------------------- Debian Security Advisory DSA 564-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2004 http://www.debian.org/security/faq -...

Debian DSA-471-1 : interchange - missing input sanitising

A vulnerability was discovered recently in Interchange, an e-commerce and general HTTP database display system. This vulnerability can be exploited by an attacker to expose the content of arbitrary variables. An attacker may learn SQL access information for your Interchange application and use th...

Debian DSA-419-1 : phpgroupware - missing filename sanitising, SQL injection

The authors of phpgroupware, a web-based groupware system written in PHP, discovered several vulnerabilities. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-0016 In the 'calendar' module, 'save extension' was not enforced for holiday files. As a...