3861 matches found
Debian DSA-796-1 : affix - remote command execution
Kevin Finisterre reports that affix, a package used to manage bluetooth sessions under Linux, uses the popen call in an unsafe fashion. A remote attacker can exploit this vulnerability to execute arbitrary commands on a vulnerable system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Debian DSA-801-1 : ntp - programming error
SuSE developers discovered that ntp confuses the given group id with the group id of the given user when called with a group id on the commandline that is specified as a string and not as a numeric gid, which causes ntpd to run with different privileges than intended. %NASLMINLEVEL 70300 C Tenabl...
[SECURITY] [DSA 796-1] New affix packages fix remote command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 796-1 [email protected] http://www.debian.org/security/ Michael Stone September 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 794-1] New polygen packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ -- Debian Security Advisory DSA 794-1 security at debian dot org email concealed http://www.debian.org/security/ Martin Schulze September 1st, 2005...
DSA-798-1 phpgroupware - several
Bulletin has no description...
[SECURITY] [DSA 794-1] New polygen packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 794-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 793-1] New sqwebmail packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 793-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2005 http://www.debian.org/security/faq -...
DSA-797-2 zsync - buffer overflow
zsync, a file transfer program, includes a modified local copy of the zlib library, and is vulnerable to certain bugs fixed previously in the zlib package. There was a build error for the sarge i386 proftpd packages released in DSA 797-1. A new build, zsync\0.3.3-1.sarge.1.2, has been prepared to...
[SECURITY] [DSA 789-1] New PHP 4 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 789-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2005 http://www.debian.org/security/faq -...
DSA-785-1 libpam-ldap - authentication bypass
Bulletin has no description...
Debian DSA-776-1 : clamav - integer overflows, infinite loop
Several bugs were discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified : - CAN-2005-2450 Neel Mehta and Alex Wheeler discovered that Clam AntiVirus is vulnerable to integer...
[SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 777-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2005 http://www.debian.org/security/faq -...
DSA-775-1 mozilla-firefox - frame injection spoofing
Bulletin has no description...
[SECURITY] [DSA 764-1] New cacti packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 764-1 [email protected] http://www.debian.org/security/ Martin Schulze July 21st, 2005 http://www.debian.org/security/faq -...
Multiple Vulnerabilities in PHP Surveyor
----------------------------------------------------------- Multiple Vulnerabilities in PHP Surveyor version 0.98 stable ------------------------------------------------------------ Summary: PHP Surveyor is vulnerable to many sql injections, cross site scriptings, and path disclosures. Details:...
[SECURITY] [DSA 757-1] New krb5 packages fix multiple vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA 757-1 [email protected] http://www.debian.org/security/ Michael Stone July 17, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
DSA-746-1 phpgroupware - remote command execution
Bulletin has no description...
Debian DSA-746-1 : phpgroupware - input validation error
A vulnerability had been identified in the xmlrpc library included with phpgroupware, a web-based application including email, calendar and other groupware functionality. This vulnerability could lead to the execution of arbitrary commands on the server running phpgroupware. The security team is...
[SECURITY] [DSA 755-1] New tiff packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 755-1 [email protected] http://www.debian.org/security/ Martin Schulze July 13th, 2005 http://www.debian.org/security/faq -...