rPSA-2007-0257-1 rsync

rPath Security Advisory: 2007-0257-1 Published: 2007-12-04 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote Deterministic Unauthorized Access Updated Versions: rsync=conary.rpath.com@rpl:1/2.6.8-1.2-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-1989...

Solaris 5.9 (sparc) : 125673-02

GNOME 2.0.2: SUNWTiff libtiff library patch. Date this patch was last updated by Sun : Aug/29/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Mandrake Linux Security Advisory : cpio (MDKSA-2007:233)

Buffer overflow in the safernamesuffix function in GNU cpio has unspecified attack vectors and impact, resulting in a crashing stack. This problem is originally found in tar, but affects cpio too, due to similar code fragments. CVE-2007-4476 Directory traversal vulnerability in cpio 2.6 and earli...

Mandrake Linux Security Advisory : tetex (MDKSA-2007:230)

A flaw in the t1lib library where an attacker could create a malicious file that would cause tetex to crash or possibly execute arbitrary code when opened CVE-2007-4033. Alin Rad Pop found several flaws in how PDF files are handled in tetex. An attacker could create a malicious PDF file that woul...

Mandrake Linux Security Advisory : net-snmp (MDKSA-2007:225)

The SNMP agent in net-snmp 5.4.1 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value. Updated packages fix this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Mandrake Linux Security Advisory : libpng (MDKSA-2007:217)

Multiple vulnerabilities were discovered in libpng : An off-by-one error when handling ICC profile chunks in the pngsetiCCP function CVE-2007-5266; only affects Mandriva Linux 2008.0. George Cook and Jeff Phillips reported several errors in pngrtran.c, such as the use of logical instead of bitwis...

Mandrake Linux Security Advisory : flac (MDKSA-2007:214)

A security vulnerability was discovered in how flac processed audio data. An attacker could create a carefully crafted FLAC audio file that could cause an application linked against the flac libraries to crash or execute arbitrary code when opened. Updated packages have been patched to prevent th...

Cisco Unified MeetingPlace Login Screen Cross-Site Scripting Vulnerability

Cisco Unified MeetingPlace versions 5.3.235.0 and prior, 5.4, and 6.0 contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to insufficient filtering of parameters passed to the Login form of Cisco Unified...

Mandrake Linux Security Advisory : xfs (MDKSA-2007:210)

Integer overflow in the buildrange function in X.Org X Font Server xfs before 1.0.5 allows context-dependent attackers to execute arbitrary code via 1 QueryXBitmaps and 2 QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow. CVE-2007-4568 The...

Fedora 7 : rss-glx-0.8.1.p-15.fc7 / tempest-0-0.4.20070929.fc7 / xscreensaver-5.03-12.fc7 (2007-2652)

A bug was reported that xscreensaver unlocking password dialog crashes randomly. It is found this problem occurs when GL hack is launched without gl helper binary installed. The new three packages fixes this issue. Now packages which contain GL xscreensaver hacks also install gl helper binary...

Fedora 7 : openvrml-0.16.6-3.fc7 (2007-2686)

Wed Oct 24 2007 Braden McDaniel - 0.16.6-3 - Updated firefox dependency to 2.0.0.8. - Thu Jun 7 2007 Braden McDaniel - 0.16.6-2 - Updated firefox dependency to 2.0.0.5. - Thu Jun 7 2007 Braden McDaniel - 0.16.6-1 - Updated to 0.16.6. - Thu Jun 7 2007 Braden McDaniel - 0.16.5-1 - Updated to...

Mandrake Linux Security Advisory : pwlib (MDKSA-2007:206)

A memory management flaw was discovered in PWLib, that an attacker could use to crash an application linked with it, such as Ekiga. Updated packages have been patched to prevent these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

Common UNIX Printing System IPP Tags Memory Corruption Vulnerability

The Common UNIX Printing System CUPS versions 1.3.3 and prior contain a vulnerability that can allow an unauthenticated, remote attacker to create a denial of service DoS condition or execute arbitrary code with the privileges of the user. The vulnerability exists in the ippReadIO function when...

Solaris 10 (sparc) : 121913-20 (deprecated)

Portal Server 7.0: Miscellaneous Fixes. Date this patch was last updated by Sun : Jun/26/09 This plugin has been deprecated and either replaced with individual 121913 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...

Solaris 10 (x86) : 120012-14 (deprecated)

SunOS 5.10x86: kernel patch. Date this patch was last updated by Sun : Sep/14/07 This plugin has been deprecated and either replaced with individual 120012 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

rPSA-2007-0212-1 util-linux

rPath Security Advisory: 2007-0212-1 Published: 2007-10-08 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Root Deterministic Privilege Escalation Updated Versions: util-linux=/conary.rpath.com@rpl:devel//1/2.12r-1.5-1 rPath Issue Tracking System:...

Mandrake Linux Security Advisory : mplayer (MDKSA-2007:192)

A heap-based buffer overflow was found in MPlayer's AVI handling that could allow a remote attacker to cause a denial of service or possibly execute arbitrary code via a crafted .avi file. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Important: nfs-utils-lib security update

1.0.8-7.2.z2 - Updated libnfsidmap to -17 to fix a security issue bz 254041 1.0.8-7.2.z1 - Fixed RPC library buffer overflow bz 265061...

Cisco IOS on Catalyst 6500 and Cisco 7600 Access Control List Bypass Vulnerability

Cisco IOS running on Catalyst 6500 and Cisco 7600 contains a vulnerability that could allow an unauthenticated, remote attacker to bypass configured ACLs. The vulnerability exists because the affected devices accept traffic to IP addresses that are reserved for use by the Ethernet Out-of-Band...

Mandrake Linux Security Advisory : qt (MDKSA-2007:183)

A buffer overflow was found in how Qt expanded malformed Unicode strings. If an application linked against Qt parsed a malicious Unicode string, it could lead to a denial of service or potentially allow for the execution of arbitrary code. Updated packages have been patched to prevent this issue...