CVE-2013-1923

CVE-2013-1923 concerns rpc-gssd in nfs-utils before 1.2.8, which performs reverse DNS resolution during GSSAPI authentication. This DNS spoofing could let an attacker read files that should be restricted by spoofing server names. The vulnerability is tied to the nfs-utils RPC GSSD component and i...

CVE-2013-1923: Exposure of Sensitive Information to an Unauthorized Actor

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks...

Fedora 20 : gnome-chemistry-utils-0.14.5-1.fc20 / gnumeric-1.12.9-1.fc20 / goffice-0.10.9-1.fc20 (2014-0033)

This is an update to the latest upstream releases of gnumeric, goffice and gnome-chemistry-utils : - https://projects.gnome.org/gnumeric/announcements/1.12/g numeric-1.12.9.shtml - http://svn.savannah.nongnu.org/viewvc/checkout/branc hes/gchemutils-0.14/gchemutils/NEWS?revision=1856&root...

Fedora Update for gnome-chemistry-utils FEDORA-2014-0020

Check for the Version of gnome-chemistry-utils OpenVAS Vulnerability Test Fedora Update for gnome-chemistry-utils FEDORA-2014-0020 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for gnome-chemistry-utils FEDORA-2014-0025

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : gnome-chemistry-utils-0.14.5-1.fc19 / gnumeric-1.12.9-1.fc19 / goffice-0.10.9-1.fc19 (2014-0020)

This is an update to the latest upstream releases of gnumeric, goffice and gnome-chemistry-utils : - https://projects.gnome.org/gnumeric/announcements/1.12/g numeric-1.12.9.shtml - http://svn.savannah.nongnu.org/viewvc/checkout/branc hes/gchemutils-0.14/gchemutils/NEWS?revision=1856&root...

Fedora Update for gnome-chemistry-utils FEDORA-2014-0025

Check for the Version of gnome-chemistry-utils OpenVAS Vulnerability Test Fedora Update for gnome-chemistry-utils FEDORA-2014-0025 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for gnome-chemistry-utils FEDORA-2014-0020

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : gnome-chemistry-utils-0.14.5-1.fc18 / gnumeric-1.12.9-1.fc18 / goffice-0.10.9-1.fc18 (2014-0025)

This is an update to the latest upstream releases of gnumeric, goffice and gnome-chemistry-utils : - https://projects.gnome.org/gnumeric/announcements/1.12/g numeric-1.12.9.shtml - http://svn.savannah.nongnu.org/viewvc/checkout/branc hes/gchemutils-0.14/gchemutils/NEWS?revision=1856&root...

[SECURITY] Fedora 20 Update: gnome-chemistry-utils-0.14.5-1.fc20

This package is a set of chemical utils. Several programs are available: A 3D molecular structure viewer GChem3D. A Chemical calculator GChemCalc. A 2D structure editor GChemPaint. A periodic table of the elements application GChemTable. A crystalline structure editor GCrystal. A spectra viewer...

[SECURITY] Fedora 18 Update: gnome-chemistry-utils-0.14.5-1.fc18

This package is a set of chemical utils. Several programs are available: A 3D molecular structure viewer GChem3D. A Chemical calculator GChemCalc. A 2D structure editor GChemPaint. A periodic table of the elements application GChemTable. A crystalline structure editor GCrystal. A spectra viewer...

[SECURITY] Fedora 19 Update: net-snmp-5.7.2-13.fc19

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

CVE-2012-0427

yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted 1 file name or 2 directory name...

CVE-2012-0427

yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted 1 file name or 2 directory name...

CVE-2012-0427

CVE-2012-0427 affects yast2-add-on-creator in SUSE inst-source-utils; local users can gain privileges via crafted (1) file name or (2) directory name. Root cause: inadequate validation in inst-source-utils prior to 0.9.1 (2008.11.26) and 0.8.1 (2012.9.13). Impact: local privilege escalation (CVE ...

CVE-2012-0427: Undefined Security Weakness

yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted 1 file name or 2 directory name...

CVE-2013-4474

CVE-2013-4474 affects Poppler (before 0.24.3). A format string vulnerability in the extractPages function (utils/pdfseparate.cc) allows remote attackers to crash the process via specially crafted destination filenames, causing a denial of service. Affected: Poppler’s pdfseparate tool; root cause:...

CVE-2013-4474: Improper Input Validation

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

CVE-2013-4473: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a source filename...

CVE-2013-6044: Improper Neutralization of Input During Web Page Generation

The issafeurl function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting XSS or other vulnerabilities into Django applications that use this function, a...