8 matches found
Debian Security Advisory DSA 2976-1 (eglibc - security update)
Stephane Chazelas discovered that the GNU C library, glibc, processed '..' path segments in locale-related environment variables, possibly allowing attackers to circumvent intended restrictions, such as ForceCommand in OpenSSH, assuming that they can supply crafted locale settings. OpenVAS...
DSA-573-1 cupsys - integer overflows
Bulletin has no description...
Debian DSA-163-1 : mhonarc - XSS
Jason Molenda and Hiromitsu Takagi foundways to exploit cross site scripting bugs in mhonarc, a mail to HTML converter. When processing maliciously crafted mails of type text/html mhonarc does not deactivate all scripting parts properly. This is fixed in upstream version 2.5.3. If you are worried...
DSA-507 cadaver - buffer overflow
Bulletin has no description...
DSA-494 ident2 - buffer overflow
Bulletin has no description...
DSA-449 metamail - buffer overflow, format string bugs
Bulletin has no description...