vsftpd Compromised Source Packages Backdoor Vulnerability - Active Check

vsftpd is prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vsftpdproject:vsftpd"; ifdescription...

[SECURITY] Fedora 15 Update: gnome-python2-extras-2.25.3-32.fc15

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

ProFTPD受控制源软件包后门安全漏洞

ProFTPD是一款开放源代码FTP服务程序。 ProFTPD的特定时期版本被插入了后门代码，远程攻击者可利用这些后门非授权获取对FTP服务器的访问，从而控制系统。 此问题影响项目的主FTP服务器和所有镜像服务器发布的被攻击的ProFTPD 1.3.3c源代码包，此代码包中包含允许远程root权限访问的后门。2010年11月28日至12月2日期间下载的源代码受此问题影响。 ProFTPD Project ProFTPD 1.3.x 厂商补丁： ProFTPD Project --------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[SECURITY] Fedora 12 Update: gnome-python2-extras-2.25.3-22.fc12

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

[SECURITY] Fedora 13 Update: gnome-python2-extras-2.25.3-22.fc13

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

[SECURITY] Fedora 11 Update: gnome-python2-extras-2.25.3-12.fc11

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

Ubuntu Update for dpkg vulnerability USN-909-1

Ubuntu Update for Linux kernel vulnerabilities USN-909-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9091.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for dpkg vulnerability USN-909-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : dpkg vulnerability (USN-909-1)

William Grant discovered that dpkg-source did not safely apply diffs when unpacking source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of...

DSA-1846-1 kvm - denial of service

Bulletin has no description...

Debian Security Advisory DSA 1712-1 (rt2400)

The remote host is missing an update to rt2400 announced via advisory DSA 1712-1. OpenVAS Vulnerability Test $Id: deb17121.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1712-1 rt2400 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1713-1 (rt2500)

The remote host is missing an update to rt2500 announced via advisory DSA 1713-1. OpenVAS Vulnerability Test $Id: deb17131.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1713-1 rt2500 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1713-1] New rt2500 packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1713-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 28, 2009 http://www.debian.org/security/faq -...

Debian DSA-1714-1 : rt2570 - integer overflow

It was discovered that an integer overflow in the 'Probe Request' packet parser of the Ralinktech wireless drivers might lead to remote denial of service or the execution of arbitrary code. Please note that you need to rebuild your driver from the source package in order to set this update into...

[SECURITY] [DSA 1713-1] New rt2500 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1713-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 28, 2009 http://www.debian.org/security/faq -...

DSA-1714-1 rt2570 - arbitrary code execution

Bulletin has no description...

DSA-1713-1 rt2500 - arbitrary code execution

Bulletin has no description...

Debian DSA-1592-1 : linux-2.6 - heap overflow

Two vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or arbitrary code execution. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1673 Wei Wang from McAfee reported a potential heap overflow in the ASN.1...

DSA-1436-1 linux-2.6 fai-kernels user-mode-linux - several vulnerabilities

Bulletin has no description...

DSA-1183-1 kernel-source-2.4.27 - several vulnerabilities

Bulletin has no description...

USN-258-1: PostgreSQL vulnerability

Akio Ishida discovered that the SET SESSION AUTHORIZATION command did not properly verify the validity of its argument. An authenticated PostgreSQL user could exploit this to crash the server. However, this does not affect the official binary Ubuntu packages. The crash can only be triggered if th...