3949 matches found
Debian DSA-1199-1 : webmin - multiple vulnerabilities
Several vulnerabilities have been identified in webmin, a web-based administration toolkit. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-3912 A format string vulnerability in miniserv.pl could allow an attacker to cause a denial of service...
BSD (telnetd) Remote Root Exploit
No description provided by source. / 7350854 - x86/bsd telnetd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...
Debian DSA-890-1 : libungif4 - several vulnerabilities
Chris Evans discovered several security related problems in libungif4, a shared library for GIF images. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-2974 NULL pointer dereference, that could cause a denial of service. - CVE-2005-3350 Out o...
Debian DSA-882-1 : openssl095 - cryptographic weakness
Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...
Debian DSA-1155-2 : sendmail - programming error
It turned out that the sendmail binary depends on libsasl2 = 2.1.19.dfsg1 which is neither available in the stable nor in the security archive. This version is scheduled for the inclusion in the next update of the stable release, though. You'll have to download the referenced file for your...
Debian DSA-1090-1 : spamassassin - programming error
A vulnerability has been discovered in SpamAssassin, a Perl-based spam filter using text analysis, that can allow remote attackers to execute arbitrary commands. This problem only affects systems where spamd is reachable via the internet and used with vpopmail virtual users, via the '-v' /...
Debian DSA-956-1 : lsh-server - filedescriptor leak
Stefan Pfetzing discovered that lshd, a Secure Shell v2 SSH2 protocol server, leaks a couple of file descriptors, related to the randomness generator, to user shells which are started by lshd. A local attacker can truncate the server's seed file, which may prevent the server from starting, and wi...
Debian DSA-878-1 : netpbm-free - buffer overflow
A buffer overflow has been identified in the pnmtopng component of the netpbm package, a set of graphics conversion tools. This vulnerability could allow an attacker to execute arbitrary code as a local user by providing a specially crafted PNM file. The old stable distribution woody it not...
Debian DSA-1075-1 : awstats - programming error
Hendrik Weimer discovered that awstats can execute arbitrary commands under the user id the web-server runs when users are allowed to supply arbitrary configuration files. Even though, this bug was referenced in DSA 1058 accidentally, it was not fixed yet. The new default behaviour is not to acce...
[SECURITY] [DSA 1172-1] New bind9 packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1172-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2006 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...
DSA-1164 sendmail - programming error
Bulletin has no description...
[Full-disclosure] [SECURITY] [DSA 1163-1] New gtetrinet packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1163-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2006 http://www.debian.org/security/faq -...
DSA-1163 gtetrinet - programming error
Bulletin has no description...
[SECURITY] [DSA 1159-1] New Mozilla Thunderbird packages fix several problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 1159-1 [email protected] http://www.debian.org/security/ Martin Schulze August 28th, 2006 http://www.debian.org/security/faq -...
DSA-1157 ruby1.8
Bulletin has no description...
[SECURITY] [DSA 1155-2] New sendmail packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1155-2 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2006 http://www.debian.org/security/faq -...
DSA-1154 squirrelmail - variable overwriting
Bulletin has no description...
[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...