[SECURITY] [DSA 165-1] New PostgreSQL packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 12th, 2002 http://www.debian.org/security/faq -...

Oracle Web Cache Admin Module Multiple GET Request Method DoS

It was possible to kill the web server by requesting '/.' or '/../', or sending an invalid request using chunked content encoding. An attacker may exploit this vulnerability to crash the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichae...

[SECURITY] [DSA-111-1] Multiple SNMP vulnerabilities

Package : ucd-snmp Problem type : remote exploit Debian-specific: no CERT Advisory : CA-2002-03 The Secure Programming Group of the Oulu University did a study on SNMP implementations and uncovered multiple problems which can cause problems ranging from Denial of Service attacks to remote exploit...

[SECURITY] [DSA-089-1] several problems in icecast-server

Package : icecast-server Problem type : remote root exploit and others Debian-specific: no The icecast-server a streaming music server package as distributed in Debian GNU/Linux 2.2 has several security problems: if a client added a / after the filename of a file to be downloaded the server would...

Zope < 2.3.3 ZClass Permission Mapping Modification Local Privilege Escalation

The remote web server uses a version of Zope which is older than version 2.3.3. In such versions, any user can visit a ZClass declaration and change the ZClass permission mappings for methods and other objects defined within the ZClass, possibly allowing for unauthorized access within the Zope...

Certain MIME types can cause Internet Explorer to execute arbitrary code when rendering HTML

Overview A vulnerability exists in Microsoft Internet Explorer that allows a malicious agent to execute arbitrary code when parsing MIME parts in a document. Any user or program that uses vulnerable versions of Internet Explorer to render HTML in a document for example, when browsing a filesystem...

[SECURITY] [DSA-029-1] New version of proftpd released

Package: proftpd Vulnerability: remote DOS & potential buffer overflow Debian-specific: no The following problems have been reported for the version of proftpd in Debian 2.2 potato: 1. There is a memory leak in the SIZE command which can result in a denial of service, as reported by Wojciech...

Caldera Systems Security Advisory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera Systems, Inc. Security Advisory Subject: security problems in dhcp Advisory number: CSSA-2001-003.0 Issue date: 2001 January, 12 Cross reference: 1. Problem Description The DHCP server and client shipped as part of OpenLinux had security...

[SECURITY] [DSA-010-1] two gpg problems

Package : gnupg Problem type : cheating with detached signatures, circumvention of web of trust Debian-specific: no Two bugs in GnuPG have recently been found: 1. false positives when verifying detached signatures - ----------------------------------------------------- There is a problem in the w...

[SECURITY] New version of nis released

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman October 14, 2000 - ------------------------------------------------------------------------...

[SECURITY] New version of nis released

Package : nis Problem type : local exploit Debian-specific: no The version of nis as distributed in Debian GNU/Linux 2.1 and 2.2 contains an ypbind package with a security problem. ypbind is used to request information from a nis server which is then used by the local machine. The logging code in...

vpopmail-3.4.11 problems

The vpopmail package is an extension for Qmail that allows easy management of virtual domains and can use a SQL backend for storing user accounts. The program vchkpw in that package contains a vulnerability in its logging routines. The vchkpw program handles the username/password/domain...

Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability

Cisco Catalyst Enable Password Bypass Vulnerability Revision 1.1 Tentatively for release 2000 April 19 08:00 AM US/Pacific UTC+0700 --------------------------------------------------------------------------- Summary ======= Cisco Catalyst software permits unauthorized access to the enable mode in...

Re: [SECURITY] New versions of super fixes two buffer overflows

Martin Schulze wrote: ==================================================================== Debian GNU/Linux Security February 15th, 1999 We have received reports about two buffer overflows in the super package which was distributed as part of Debian GNU/Linux. Firstly, for per-user .supertab file...

[SECURITY] New versions of bash fixes buffer overflows

We have received reports that the bash shell had a problem with very long pathnames. When a very long path was encountered bash failed to check the result of getcwd in all places, which could be exploited. We recommend you upgrade your bash package immediately. wget url will fetch the file for yo...

[SECURITY] New versions of bsdgames fixes sail /tmp race

The game sail as provided by the bsdgames package contained a /tmp race. This has been fixes. We recommend you upgrade your bsdgames package. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.0 alias hamm This version of Debian were release...

Forefront Client Security Service Pack 1 (KB951951)

This service pack upgrades Microsoft Forefront Client Security to Microsoft Forefront Client Security Service Pack 1 SP1. This service pack can be installed on the Client Security management and collection server roles. Some of the fixes included with SP1 were previously released as separate...