Mandrake Linux Security Advisory : xchat (MDKSA-2002:006)

zen-parse discovered a problem in versions 1.4.2 and 1.4.3 of xchat that could allow a malicious user to send commands to the IRC server they are on which would take advantage of the CTCP PING reply handler in xchat. This could be used for denial of service, channel takeovers, and other similar...

DSA-485 ssmtp - format string

Bulletin has no description...

Buffer overflow in PicoPhone 1.63

Luigi Auriemma Application: Picophone http://www.vitez.it/picophone/ Versions: = 1.63 Platforms: Windows Bug: buffer overflow in the logging function Risk: high Exploitation: remote Date: 24 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

[Full-Disclosure] [SECURITY] [DSA 419-1] New phpgroupware packages fix unintended PHP execution and SQL injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 419-1 [email protected] http://www.debian.org/security/ Martin Schulze January 9th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-373-1] New autorespond packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 373-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 16th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-324-1] New ethereal packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 324-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 18th, 2003 http://www.debian.org/security/faq -...

DSA-315 gnocatan - buffer overflows, denial of service

Bulletin has no description...

iDEFENSE Security Advisory 2003-05-22.t

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 05.22.03: http://www.idefense.com/advisory/05.22.03.txt Authentication Bypass in iisPROTECT May 22, 2003 I. BACKGROUND iisPROTECT is designed to provide password protection to web directories similar to the htaccess method...

DSA-292 mime-support - insecure temporary file creation

Bulletin has no description...

[SECURITY] [DSA 247-1] New courier packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 247-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2003 http://www.debian.org/security/faq -...

DSA-247 courier-ssl - missing input sanitizing

Bulletin has no description...

DSA-227 openldap2 - buffer overflows and other bugs

Bulletin has no description...

[SECURITY] [DSA-206-1] tcpdump BGP decoding error

------------------------------------------------------------------------ Debian Security Advisory DSA-206-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 10, 2002 - ------------------------------------------------------------------------ Package : tcpdump Problem...

[SECURITY] [DSA 191-2] New squirrelmail packages fix problem in options page

-------------------------------------------------------------------------- Debian Security Advisory DSA 191-2 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2002 http://www.debian.org/security/faq -...

DSA-172 tkmail - insecure temporary files

Bulletin has no description...

[SECURITY] [DSA-074-1] buffer overflow in Window Maker

Package : wmaker Problem type : buffer overflow Debian-specific: no Alban Hertroys found a buffer overflow in Window Maker a popular window manager for X. The code that handles titles in the window list menu did not check the length of the title when copying it to a buffer. Since applications wil...

[SECURITY] [DSA-046-1] exuberant-ctags uses insecure temporary files

Package : exuberant-ctags Problem type : insecure temporary files Debian-specific: no Colin Phipps discovered that the exuberant-ctags packages as distributed with Debian GNU/Linux 2.2 creates temporary files insecurely. This has been fixed in version 1:3.2.4-0.1 of the Debian package, and upstre...

[SECURITY] [DSA-002-1] fsh symlink attack

Package : fsh Problem type : symlink attack Debian-specific: no Colin Phipps found an interesting symlink attack problem in fsh a tool to quickly run remote commands over rsh/ssh/lsh. When fshd starts it creates a directory in /tmp to hold its sockets. It tries to do that securely by checking of ...

[SECURITY] New version of nis released

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman October 14, 2000 - ------------------------------------------------------------------------...