1513 matches found
DSA-574-1 cabextract - missing directory sanitising
Bulletin has no description...
DSA-573-1 cupsys - integer overflows
Bulletin has no description...
DSA-559-1 net-acct - insecure temporary file
Bulletin has no description...
Debian DSA-150-1 : interchange - illegal file exposition
A problem has been discovered in Interchange, an e-commerce and general HTTP database display system, which can lead to an attacker being able to read any file to which the user of the Interchange daemon has sufficient permissions, when Interchange runs in 'INET mode' internet domain socket. This...
Debian DSA-146-2 : dietlibc - integer overflow
An integer overflow bug has been discovered in the RPC library used by dietlibc, a libc optimized for small size, which is derived from the SunRPC library. This bug could be exploited to gain unauthorized root access to software linking to this code. The packages below also fix integer overflows ...
Debian DSA-194-1 : masqmail - buffer overflows
A set of buffer overflows have been discovered in masqmail, a mail transport agent for hosts without permanent internet connection. In addition to this privileges were dropped only after reading a user-supplied configuration file. Together this could be exploited to gain unauthorized root access ...
Debian DSA-163-1 : mhonarc - XSS
Jason Molenda and Hiromitsu Takagi foundways to exploit cross site scripting bugs in mhonarc, a mail to HTML converter. When processing maliciously crafted mails of type text/html mhonarc does not deactivate all scripting parts properly. This is fixed in upstream version 2.5.3. If you are worried...
Debian DSA-517-1 : cvs - buffer overflow
Derek Robert Price discovered a potential buffer overflow vulnerability in the CVS server, based on a malformed Entry, which serves the popular Concurrent Versions System. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
Debian DSA-155-1 : kdelibs - privacy escalation with Konqueror
Due to a security engineering oversight, the SSL library from KDE, which Konqueror uses, doesn't check whether an intermediate certificate for a connection is signed by the certificate authority as safe for the purpose, but accepts it when it is signed. This makes it possible for anyone with a...
Debian DSA-249-1 : w3mmee - missing HTML quoting
Hironori Sakamoto, one of the w3m developers, found two security vulnerabilities in w3m and associated programs. The w3m browser does not properly escape HTML tags in frame contents and img alt attributes. A malicious HTML frame or img alt attribute may deceive a user to send their local cookies...
Debian DSA-202-1 : im - insecure temporary files
Tatsuya Kinoshita discovered that IM, which contains interface commands and Perl libraries for E-mail and NetNews, creates temporary files insecurely. - The impwagent program creates a temporary directory in an insecure manner in /tmp using predictable directory names without checking the return...
DSA-553-1 getmail - symlink vulnerability
Bulletin has no description...
DSA-529 netkit-telnet-ssl - format string
Bulletin has no description...
DSA-517 cvs - buffer overflow
Bulletin has no description...
DSA-507 cadaver - buffer overflow
Bulletin has no description...
DSA-503 mah-jong - missing argument check
Bulletin has no description...
DSA-502 exim-tls - buffer overflow
Bulletin has no description...
[SECURITY] [DSA 493-1] New xchat packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 493-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2004 http://www.debian.org/security/faq -...