Authorization

KnowledgeTree Document Management aka KnowledgeTree Open Source before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check...

[SECURITY] [DSA 1291-3] New samba packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1291-3 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 20th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...

DSA-1292-1 qt4-x11

Bulletin has no description...

DSA-1288-1 pptpd

Bulletin has no description...

DSA-1284-1 qemu

Bulletin has no description...

tomcat -- multiple vulnerabilities

Apache Project reports: The Apache Tomcat team is proud to announce the immediate availability of Tomcat 4.1.36 stable. This build contains numerous library updates, A small number of bug fixes and two important security fixes...

DSA-1279-1 webcalendar - missing input sanitising

Bulletin has no description...

DSA-1275-1 zope2.7 - cross-site scripting

Bulletin has no description...

dproxy-nexgen (Linux x86) - Remote Buffer Overflow

/ dproxy-v1.c Copyright c 2007 by dproxy-nexgen remote root exploit x86-lnx by mu-b - Mar 2007 - Tested on: dproxy-nexgen .tar.gz This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation;...

DSA-1273-1 nas - several vulnerabilities

Bulletin has no description...

Debian DSA-1272-1 : tcpdump - buffer overflow

Moritz Jodeit discovered an off-by-one buffer overflow in tcpdump, a powerful tool for network monitoring and data acquisition, which allows denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Debian DSA-1268-1 : libwpd - integer overflow

iDefense reported several integer overflow bugs in libwpd, a library for handling WordPerfect documents. Attackers were able to exploit these with carefully crafted Word Perfect files that could cause an application linked with libwpd to crash or possibly execute arbitrary code. %NASLMINLEVEL 703...

DSA-1266-1 gnupg - several vulnerabilities

Bulletin has no description...

Debian DSA-1262-1 : gnomemeeting - format string

'Mu Security' discovered that a format string vulnerability in the VoIP solution GnomeMeeting allows the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1262...

[Full-disclosure] Multiple vulnerabilities in phpMyVisites

Multiple vulnerabilities in phpMyVisites Application : phpMyVisites prior to 2.2 stable Release Date : 11 February 2007 Author : Nicob nicob at nicob.net Abstract : ========== Several vulnerabilities were identified in phpMyVisites. This software is "a free and powerful open source GNU/GPL softwa...

DSA-1255-1 libgtop2

Bulletin has no description...

DSA-1254-1 bind9

Bulletin has no description...

Fedora Core 4 : kernel-2.6.17-1.2141_FC4 (2006-769)

An update to the latest upstream stable release 2.6.17.3, which fixes a security issue with SCTP. Further details: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.2 Note that Tenable Network Security has extracted the...

Fedora Core 5 : kernel-2.6.18-1.2239.fc5 (2006-1221)

This updates to the latest upstream stable kernel 2.6.18.2, and also fixes a number of security issues. MOKB-05-11-2006: Linux 2.6.x ISO9660 findgetblockslow denial of service http://projects.info-pull.com/mokb/MOKB-05-11-2006.html CVE-2006-5757 MOKB-07-11-2006: Linux 2.6.x zlibinflate memory...