Debian DSA-2520-1 : openoffice.org - Multiple heap-based buffer overflows

Timo Warns from PRE-CERT discovered multiple heap-based buffer overflows in OpenOffice.org, an office productivity suite. The issues lies in the XML manifest encryption tag parsing code. Using specially crafted files, an attacker can cause application crash and could cause arbitrary code executio...

DSA-2517-1 bind9 - denial of service

Bulletin has no description...

Debian DSA-2508-1 : kfreebsd-8 - privilege escalation

Rafal Wojtczuk from Bromium discovered that FreeBSD wasn't handling correctly uncanonical return addresses on Intel amd64 CPUs, allowing privilege escalation to kernel for local users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 2510-1] extplorer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2510-1 [email protected] http://www.debian.org/security/ Luciano Bello July 12, 2012 http://www.debian.org/security/faq -...

Debian DSA-2495-1 : openconnect - buffer overflow

A buffer overflow was discovered in OpenConnect, a client for the Cisco AnyConnect VPN, which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2495. The...

Debian DSA-2482-1 : libgdata - insufficient certificate validation

Vreixo Formoso discovered that libgdata, a library used to access various Google services, wasn't validating certificates against trusted system root CAs when using an HTTPS connection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

DSA-2504-1 libspring-2.5-java - information disclosure

Bulletin has no description...

[BSA-074] Security update for libreoffice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problem: CVE-2012-1149 Integer overflows in PNG image handling For the squeeze-backports distribution the problems have been fixed in version 1:3.4.6-2bpo60+2...

[SECURITY] [DSA 2480-3] request-tracker3.8 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2480-3 [email protected] http://www.debian.org/security/ Florian Weimer June 07, 2012 http://www.debian.org/security/faq -...

DSA-2487-1 openoffice.org - buffer overflow

Bulletin has no description...

DSA-2485-1 imp4 - cross site scripting

Bulletin has no description...

DSA-2484-1 nut - denial of service

Bulletin has no description...

Debian Security Advisory DSA 2480-2 (request-tracker3.8)

The remote host is missing an update to request-tracker3.8 announced via advisory DSA 2480-2. OpenVAS Vulnerability Test $Id: deb24802.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2480-2 request-tracker3.8 Authors: Thomas Reinke Copyright: Copyright c 20...

Debian Security Advisory DSA 2472-1 (gridengine)

The remote host is missing an update to gridengine announced via advisory DSA 2472-1. OpenVAS Vulnerability Test $Id: deb24721.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2472-1 gridengine Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2473-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2473-1. OpenVAS Vulnerability Test $Id: deb24731.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2473-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

Debian Security Advisory DSA 2475-1 (openssl)

The remote host is missing an update to openssl announced via advisory DSA 2475-1. OpenVAS Vulnerability Test $Id: deb24751.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2475-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[BSA-071] Security Update for request-tracker4

Dominic Hargreaves uploaded new packages for request-tracker4 which fixed the following security problems: CVE-2011-2082 The vulnerable-passwords scripts introduced for CVE-2011-0009 failed to correct the password hashes of disabled users. CVE-2011-2083 Several cross-site scripting issues have be...

DSA-2479-1 libxml2 - off-by-one

Bulletin has no description...

Debian DSA-2475-1 : openssl - integer underflow

It was discovered that openssl did not correctly handle explicit Initialization Vectors for CBC encryption modes, as used in TLS 1.1, 1.2, and DTLS. An incorrect calculation would lead to an integer underflow and incorrect memory access, causing denial of service application crash. %NASLMINLEVEL...

Debian DSA-2472-1 : gridengine - privilege escalation

Dave Love discovered that users who are allowed to submit jobs to a Grid Engine installation can escalate their privileges to root because the environment is not properly sanitized before creating processes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...