Fedora Core 4 : xpdf-3.01-0.FC4.8 (2006-104)

xpdf contains a heap based buffer overflow in the splash rasterizer engine that can crash kpdf or even execute arbitrary code. Users impacted by these issues, should update to this new package release. Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora Core 4 : kernel-2.6.15-1.1831_FC4 (2006-102)

This update fixes a remotely exploitable denial of service attack in the icmp networking code CVE-2006-0454. An information leak has also been fixed CVE-2006-0095, and some debugging patches that had accidentally been left applied in the previous update have been removed, restoring the...

Mozilla Foundation Application Detection

There is at least one instance of Firefox, Thunderbird, SeaMonkey, or the Mozilla browser installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20862; scriptversion"1.83"; scriptsetattributeattribute:"pluginmodificationdate",...

Solaris 10 (x86) : 121005-04

SunOS 5.10x86: sh patch. Date this patch was last updated by Sun : May/23/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Vuze Installed

Vuze formerly Azureus, peer-to-peer file sharing software, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20844; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24";...

Adobe Reader Detection

Adobe Reader, a PDF file viewer, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20836; scriptversion"1.38"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/08/06"; scriptxrefname:"IAVT", value:"0001-T-0524";...

Ubuntu 5.04 : ffmpeg vulnerability (USN-230-1)

Simon Kilvington discovered a buffer overflow in the avcodecdefaultgetbuffer function of the ffmpeg library. By tricking an user into opening a malicious movie which contains specially crafted PNG images, this could be exploited to execute arbitrary code with the user's privileges. Note that...

Ubuntu 4.10 / 5.04 / 5.10 : w3c-libwww vulnerability (USN-220-1)

Sam Varshavchik discovered several buffer overflows in the HTBoundaryputblock function. By sending specially crafted HTTP multipart/byteranges MIME messages, a malicious HTTP server could trigger an out of bounds memory access in the libwww library, which causes the program that uses the library ...

Ubuntu 4.10 / 5.04 / 5.10 : libapache2-mod-auth-pgsql vulnerability (USN-239-1)

Several format string vulnerabilities were discovered in the error logging handling. By sending specially crafted user names, an unauthenticated remote attacker could exploit this to crash the Apache server or possibly even execute arbitrary code with the privileges of Apache user 'www-data'. Not...

Ubuntu 4.10 / 5.04 / 5.10 : mailman vulnerabilities (USN-242-1)

Aliet Santiesteban Sifontes discovered a remote Denial of Service vulnerability in the attachment handler. An email with an attachment whose filename contained invalid UTF-8 characters caused mailman to crash. CVE-2005-3573 Mailman did not sufficiently verify the validity of email dates. Very lar...

Ubuntu 5.10 : mysql-dfsg-4.1 vulnerability (USN-180-2)

USN-180-1 fixed a vulnerability in the mysql-server package which ships version 4.0. Version 4.1 is vulnerable against the same flaw. Please note that this package is not officially supported in Ubuntu 5.10. Origial advisory : 'AppSecInc Team SHATTER discovered a buffer overflow in the 'CREATE...

Ubuntu 5.04 / 5.10 : texinfo regression bug fix (USN-194-2)

USN-194-1 fixed a vulnerability in the 'texindex' program. Unfortunately this update introduced a regression that caused the program to abort when cleaning up temporary files which are used with extraordinarily large input files. The updated packages fix this. Note that Tenable Network Security h...

Ubuntu 5.04 : inkscape vulnerability (USN-223-1)

Javier Fernandez-Sanguino Pena discovered that Inkscape's ps2epsi.sh script, which converts PostScript files to Encapsulated PostScript format, creates a temporary file in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the...

Ubuntu 5.10 : nbd vulnerability (USN-237-1)

Kurt Fitzner discovered that the NBD network block device server did not correctly verify the maximum size of request packets. By sending specially crafted large request packets, a remote attacker who is allowed to access the server could exploit this to execute arbitrary code with root privilege...

Ubuntu 4.10 / 5.04 / 5.10 : fetchmail vulnerability (USN-233-1)

Steve Fosdick discovered a remote Denial of Service vulnerability in fetchmail. When using fetchmail in 'multidrop' mode, a malicious email server could cause a crash by sending an email without any headers. Since fetchmail is commonly called automatically with cron, for example, this crash could...

Ubuntu 4.10 / 5.04 / 5.10 : perl vulnerability (USN-222-1)

Jack Louis of Dyad Security discovered that Perl did not sufficiently check the explicit length argument in format strings. Specially crafted format strings with overly large length arguments led to a crash of the Perl interpreter or even to execution of arbitrary attacker-defined code with the...

Fedora Core 4 : httpd-2.0.54-10.3 (2006-052)

This update includes fixes for three security issues in the Apache HTTP Server. A memory leak in the worker MPM could allow remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from being reused for other...

Ubuntu 4.10 / 5.04 : krb4, krb5 vulnerabilities (USN-224-1)

Gael Delalleau discovered a buffer overflow in the envoptadd function of the Kerberos 4 and 5 telnet clients. By sending specially crafted replies, a malicious telnet server could exploit this to execute arbitrary code with the privileges of the user running the telnet client. CVE-2005-0468 Gael...

Fedora Core 4 : kdegraphics-3.5.0-0.2.fc4 (2006-037)

Several flaws were discovered in Xpdf. An attacker could construct a carefully crafted PDF file that could cause xpdf to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-3193 to these issues. Users of kdegraphics...

Ubuntu 4.10 / 5.04 : cvs vulnerability (USN-117-1)

Alen Zukich discovered a buffer overflow in the processing of version and author information in the CVS client. By tricking an user to connect to a malicious CVS server, an attacker could exploit this to execute arbitrary code with the privileges of the connecting user. Note that Tenable Network...