3949 matches found
DSA-857-1 graphviz - insecure temporary file
Bulletin has no description...
DSA-847-1 dia - missing input sanitising
Bulletin has no description...
Debian DSA-824-1 : clamav - infinite loop, buffer overflow
Two vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified : - CAN-2005-2919 A potentially infinite loop could lead to a denial of service. -...
Debian DSA-816-1 : xfree86 - integer overflow
Soren Sandmann discovered a bug in memory allocation for pixmap images, that can cause a crash of the X server or to execute arbitrary code. The update for the old stable distribution woody also contains a different correction for multiple vulnerabilities in libXpm DSA 607, CAN-2004-0914,...
DSA-821-1 python2.3 - integer overflow
Bulletin has no description...
DSA-813-1 centericq - several
Bulletin has no description...
Debian DSA-798-1 : phpgroupware - several vulnerabilities
Several vulnerabilities have been discovered in phpgroupware, a web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2498 Stefan Esser discovered another vulnerability in the XML-RPC libraries that allows...
Debian DSA-796-1 : affix - remote command execution
Kevin Finisterre reports that affix, a package used to manage bluetooth sessions under Linux, uses the popen call in an unsafe fashion. A remote attacker can exploit this vulnerability to execute arbitrary commands on a vulnerable system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Debian DSA-801-1 : ntp - programming error
SuSE developers discovered that ntp confuses the given group id with the group id of the given user when called with a group id on the commandline that is specified as a string and not as a numeric gid, which causes ntpd to run with different privileges than intended. %NASLMINLEVEL 70300 C Tenabl...
[SECURITY] [DSA 796-1] New affix packages fix remote command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 796-1 [email protected] http://www.debian.org/security/ Michael Stone September 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 794-1] New polygen packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ -- Debian Security Advisory DSA 794-1 security at debian dot org email concealed http://www.debian.org/security/ Martin Schulze September 1st, 2005...
DSA-798-1 phpgroupware - several
Bulletin has no description...
[SECURITY] [DSA 794-1] New polygen packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 794-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 793-1] New sqwebmail packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 793-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2005 http://www.debian.org/security/faq -...
DSA-797-2 zsync - buffer overflow
zsync, a file transfer program, includes a modified local copy of the zlib library, and is vulnerable to certain bugs fixed previously in the zlib package. There was a build error for the sarge i386 proftpd packages released in DSA 797-1. A new build, zsync\0.3.3-1.sarge.1.2, has been prepared to...
[SECURITY] [DSA 789-1] New PHP 4 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 789-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2005 http://www.debian.org/security/faq -...
DSA-785-1 libpam-ldap - authentication bypass
Bulletin has no description...
Debian DSA-776-1 : clamav - integer overflows, infinite loop
Several bugs were discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The following problems were identified : - CAN-2005-2450 Neel Mehta and Alex Wheeler discovered that Clam AntiVirus is vulnerable to integer...
[SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 777-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2005 http://www.debian.org/security/faq -...