Debian: Security Advisory (DSA-2674-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exim and Dovecot Insecure Configuration Command Injection

This module exploits a command injection vulnerability against Dovecot with Exim using the "useshell" option. It uses the sender's address to inject arbitrary commands, since this is one of the user-controlled variables. It has been successfully tested on Debian Squeeze using the default Exim4 wi...

Debian DSA-2663-1 : tinc - stack based buffer overflow

Martin Schobert discovered a stack-based vulnerability in tinc, a Virtual Private Network VPN daemon. When packets are forwarded via TCP, packet length is not checked against the stack buffer length. Authenticated peers could use this to crash the tinc daemon and maybe execute arbitrary code. Not...

Debian: Security Advisory (DSA-2660-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MongoDB - nativeHelper.apply Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'MongoDB nativeHelper.apply Remote Cod...

[SECURITY] [DSA 2657-1] postgresql-8.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2657-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 04, 2013 http://www.debian.org/security/faq -...

Debian DSA-2654-1 : libxslt - denial of service

Nicolas Gregoire discovered that libxslt, an XSLT processing runtime library, is prone to denial of service vulnerabilities via crafted XSL stylesheets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

DSA-2654-1 libxslt - denial of service

Bulletin has no description...

MongoDB nativeHelper.apply Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'MongoDB nativeHelper.apply Remote Cod...

Debian: Security Advisory (DSA-2647-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an...

Debian DSA-2635-1 : cfingerd - buffer overflow

Malcolm Scott discovered a remote-exploitable buffer overflow in the RFC1413 ident client of cfingerd, a configurable finger daemon. This vulnerability was introduced in a previously applied patch to the cfingerd package in 1.4.3-3. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 2636-2] xen regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2636-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 03, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2632-1] linux-2.6 security update

---------------------------------------------------------------------- Debian Security Advisory DSA-2632-1 [email protected] http://www.debian.org/security/ Dann Frazier February 25, 2013 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

Debian DSA-2629-1 : openjpeg - several issues

CVE-2009-5030 Heap memory corruption leading to invalid free when processing certain Gray16 TIFF images. - CVE-2012-3358 Huzaifa Sidhpurwala of the Red Hat Security Response Team found a heap-based buffer overflow in JPEG2000 image parsing. - CVE-2012-3535 Huzaifa Sidhpurwala of the Red Hat...

DSA-2632-1 linux-2.6 - several vulnerabilities

Bulletin has no description...

CKEditor 4.0.1 多个安全漏洞

CKEditor是一款在线文字编辑器 CKEditor存在多个安全漏洞，允许攻击者利用漏洞进行跨站请求伪造，跨站脚本攻击及获取路径信息 0 CKEditor 4.0.1 厂商解决方案 目前没有详细解决方案提供： http://ckeditor.com/ =========================================== Vulnerable Software: ckeditor 4.0.1 standard Download:...

CKEditor 4.0.1 - Multiple Vulnerabilities

=========================================== Vulnerable Software: ckeditor 4.0.1 standard Download: http://download.cksource.com/CKEditor/CKEditor/CKEditor%204.0.1/ckeditor4.0.1standard.zip Vulns: Full Path Disclosure && XSS =========================================== Tested On: Debian squeeze 6.0...

[SECURITY] [DSA 2624-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2623-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...