[SECURITY] [DSA 969-1] New scponly packages fix potential root vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 969-1 [email protected] http://www.debian.org/security/ Martin Schulze February 13th, 2006 http://www.debian.org/security/faq -...

[SA18651] Powersave Privilege Escalation Vulnerability

TITLE: Powersave Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA18651 VERIFY ADVISORY: http://secunia.com/advisories/18651/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Powersave 0.x http://secunia.com/product/7280/ DESCRIPTION: A vulnerability has...

[SECURITY] [DSA 963-1] New mydns packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 963-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2006 http://www.debian.org/security/faq -...

FreeBSD-SA-06:06.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:06.kmem Security Advisory The FreeBSD Project Topic: Local kernel memory disclosure Category: core Module: kernel Announced: 2006-01-25 Credits: Xin LI, Karl...

Arkeia Type 77 Request buffer overflow

Added: 01/24/2006 CVE: CVE-2005-0491 BID: 12594 OSVDB: 14011 Background The Arkeia network backup software includes a daemon program called arkeiad which listens for connections on TCP port 617. Problem A buffer overflow in the processing of type 77 requests sent to the arkeiad listener allows...

[SECURITY] [DSA 950-1] New CUPS packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 950-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23rd, 2006 http://www.debian.org/security/faq -...

DSA-948-1 kdelibs - heap overflow

Bulletin has no description...

CVE-2006-0140

Cross-site scripting XSS vulnerability in post.php in NavBoard V16 Stable2.6.0 and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the 1 b, 2 textlarge, and 3 url bbcode tags...

Let all the forward program to achieve the reverse connection-vulnerability warning-the black bar safety net

As a backdoor program, you first need to covert strong, and secondly to have the practical functions of the head can not be too large, the self-protection function also to be strong, the last program run to be stable, otherwise halfway error-prone trouble; there is a need to support multiple user...

DSA-917-1 courier - programming error

Bulletin has no description...

Fedora Core 4 : kernel-2.6.14-1.1644_FC4 (2005-1104)

This update rebases to the latest upstream stable release, which fixes a number of minor security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

[SECURITY] [DSA 896-1] New ftpd-ssl packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 896-1 [email protected] http://www.debian.org/security/ Martin Schulze November 15th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 878-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2005 http://www.debian.org/security/faq -...

DSA-548-2 imlib - unsanitised input

Bulletin has no description...

[SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 868-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 867-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2005 http://www.debian.org/security/faq -...

e107 remote commands execution

e107 0.617 stable/ 0.6171 / 0.6172 resetcore.php utility SQL Injection / Login bypass / remote code execution / cross site scripting software: site: http://e107.org/news.php description: "e107 is a content management system written in php and using the popular open source mySQL database system fo...

DSA-861-1 up-imap - buffer overflow

Bulletin has no description...

Debian DSA-862-1 : ruby1.6 - programming error

Yutaka Oiwa discovered a bug in Ruby, the interpreter for the object-oriented scripting language, that can cause illegal program code to bypass the safe level and taint flag protections check and be executed. The following matrix lists the fixed versions in our distributions : old stable woody...

[SECURITY] [DSA 858-1] New xloadimage packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 858-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...