Important: Red Hat Security Advisory: emacs security update

Updated Emacs packages that fix a string format issue are now available. Emacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. If a user connects to a malicious POP server, an...

RHEL 2.1 / 3 : xemacs (RHSA-2005:134)

Updated XEmacs packages that fix a string format issue are now available. XEmacs is a powerful, customizable, self-documenting, modeless text editor. Max Vozeler discovered several format string vulnerabilities in the movemail utility of XEmacs. If a user connects to a malicious POP server, an...

CVE-2005-0100

The CVE-2005-0100 entry documents a format-string vulnerability in movemail used by Emacs (20.x, 21.3 and possibly other versions) and XEmacs up to 21.4, enabling remote code execution via crafted POP3 packets. Affected components: movemail utility within Emacs/XEmacs; root cause: unsafe handling...

CVE-2005-0100

Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...

CVE-2005-0100

Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...

USN-76-1: Emacs vulnerability

Max Vozeler discovered a format string vulnerability in the "movemail" utility of Emacs. By sending specially crafted packets, a malicious POP3 server could cause a buffer overflow, which could have been exploited to execute arbitrary code with the privileges of the user and the "mail" group sinc...

CVE-2005-0100

Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...

CVE-2005-0100

Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...

CVE-2005-0100

Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...

DEBIAN-CVE-2005-0100

Format string vulnerability in the movemail utility in 1 Emacs 20.x, 21.3, and possibly other versions, and 2 XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets...

emacs -- movemail format string vulnerability

Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting to a malicious POP server and can allow an attacker can execute arbitrary code under the privileges of the user running Emacs...

CVE-2004-0917

The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag...

security flaw

Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale...

Important: Red Hat Security Advisory: less security update

An updated less package that fixes segmentation fault when viewing binary files is now available. The less utility is a text file browser that resembles more, but has extended capabilities. Victor Ashik discovered a heap based buffer overflow in less, caused by a patch added to the less package i...

[SECURITY] [DSA 652-1] New unarj packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 652-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2005 http://www.debian.org/security/faq -...

USN-65-1: Apache utility script vulnerability

Javier Fernández-Sanguino Peña noticed that the "checkforensic" script created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

CVE-2004-1183

CVE-2004-1183 affects the tiffdump utility in libtiff (v3.7.1 and earlier). An integer overflow in tiffdump can be triggered by processing a specially crafted TIFF file, allowing a remote attacker to cause an application crash (denial of service) and potentially execute arbitrary code. The vulner...

CVE-2004-1183

Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted TIFF file...

CVE-2004-1183

Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted TIFF file...

Mandrake Linux Security Advisory : cups (MDKSA-2005:008)

A buffer overflow was discovered in the ParseCommand function in the hpgltops utility. An attacker with the ability to send malicious HPGL files to a printer could possibly execute arbitrary code as the 'lp' user CVE-2004-1267. Vulnerabilities in the lppasswd utility were also discovered. The...