DSA-736-2 spamassassin - mail header parsing error

Bulletin has no description...

[SECURITY] [DSA 732-1] New mailutils packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 732-1 [email protected] http://www.debian.org/security/ Martin Schulze June 3rd, 2005 http://www.debian.org/security/faq -...

Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit

No description provided by source. / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes: tested on Debian Sarge Linux...

[SECURITY] [DSA 730-1] New bzip2 packages fix file unauthorised permissions modification

-------------------------------------------------------------------------- Debian Security Advisory DSA 730-1 [email protected] http://www.debian.org/security/ Martin Schulze May 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 730-1] New bzip2 packages fix file unauthorised permissions modification

-------------------------------------------------------------------------- Debian Security Advisory DSA 730-1 [email protected] http://www.debian.org/security/ Martin Schulze May 27th, 2005 http://www.debian.org/security/faq -...

DSA-729-1 php4 - missing input sanitising

Bulletin has no description...

[SECURITY] [DSA 724-1] New phpsysinfo packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 724-1 [email protected] http://www.debian.org/security/ Martin Schulze May 18th, 2005 http://www.debian.org/security/faq -...

exp2.php.txt

? / Mysql CREATE FUNCTION func table arbitrary library injection Author: Stefano Di Paola Vulnerable: Mysql = 4.0.23, 4.1.10 Type of Vulnerability: Local/Remote Privileges Escalation - input validation Tested On : Mandrake 10.1 /Debian Sarge Vendor Status: Notified on March 2005 Copyright 2005...

exp3.pl.txt

!/usr/bin/perl Mysql CREATE FUNCTION libc arbitrary code execution. Author: Stefano Di Paola Vulnerable: Mysql 0; use constant PASS = "USEYOURPASSHERE"; Connect to the database. my $dbh = DBI-connect"DBI:mysql:database=test;host=localhost", "root", PASS ,'RaiseError' = 1; This is the opcode point...