4197 matches found
DSA-574-1 cabextract - missing directory sanitising
Bulletin has no description...
DSA-573-1 cupsys - integer overflows
Bulletin has no description...
DSA-559-1 net-acct - insecure temporary file
Bulletin has no description...
Debian DSA-194-1 : masqmail - buffer overflows
A set of buffer overflows have been discovered in masqmail, a mail transport agent for hosts without permanent internet connection. In addition to this privileges were dropped only after reading a user-supplied configuration file. Together this could be exploited to gain unauthorized root access ...
Debian DSA-163-1 : mhonarc - XSS
Jason Molenda and Hiromitsu Takagi foundways to exploit cross site scripting bugs in mhonarc, a mail to HTML converter. When processing maliciously crafted mails of type text/html mhonarc does not deactivate all scripting parts properly. This is fixed in upstream version 2.5.3. If you are worried...
Debian DSA-249-1 : w3mmee - missing HTML quoting
Hironori Sakamoto, one of the w3m developers, found two security vulnerabilities in w3m and associated programs. The w3m browser does not properly escape HTML tags in frame contents and img alt attributes. A malicious HTML frame or img alt attribute may deceive a user to send their local cookies...
Debian DSA-202-1 : im - insecure temporary files
Tatsuya Kinoshita discovered that IM, which contains interface commands and Perl libraries for E-mail and NetNews, creates temporary files insecurely. - The impwagent program creates a temporary directory in an insecure manner in /tmp using predictable directory names without checking the return...
Debian DSA-146-2 : dietlibc - integer overflow
An integer overflow bug has been discovered in the RPC library used by dietlibc, a libc optimized for small size, which is derived from the SunRPC library. This bug could be exploited to gain unauthorized root access to software linking to this code. The packages below also fix integer overflows ...
Debian DSA-517-1 : cvs - buffer overflow
Derek Robert Price discovered a potential buffer overflow vulnerability in the CVS server, based on a malformed Entry, which serves the popular Concurrent Versions System. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
Debian DSA-155-1 : kdelibs - privacy escalation with Konqueror
Due to a security engineering oversight, the SSL library from KDE, which Konqueror uses, doesn't check whether an intermediate certificate for a connection is signed by the certificate authority as safe for the purpose, but accepts it when it is signed. This makes it possible for anyone with a...
Debian DSA-434-1 : gaim - several vulnerabilities
Stefan Esser discovered several security related problems in Gaim, a multi-protocol instant messaging client. Not all of them are applicable for the version in Debian stable, but affected the version in the unstable distribution at least. The problems were grouped for the Common Vulnerabilities a...
Debian DSA-150-1 : interchange - illegal file exposition
A problem has been discovered in Interchange, an e-commerce and general HTTP database display system, which can lead to an attacker being able to read any file to which the user of the Interchange daemon has sufficient permissions, when Interchange runs in 'INET mode' internet domain socket. This...
DSA-553-1 getmail - symlink vulnerability
Bulletin has no description...
DSA-529 netkit-telnet-ssl - format string
Bulletin has no description...
[SECURITY] [DSA 517-1] New CVS packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 517-1 [email protected] http://www.debian.org/security/ Martin Schulze June 10th, 2004 http://www.debian.org/security/faq -...
DSA-517 cvs - buffer overflow
Bulletin has no description...
[Full-Disclosure] RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I discovered a new XSS vuln in SquirrelMail which is quite dangerous since it could be exploited simply by sending a specially crafted mail to the victim. The victim only has to read the email in order to trigger the exploit. This bug is presen...
DSA-507 cadaver - buffer overflow
Bulletin has no description...