[SECURITY] [DSA 223-1] New geneweb packages fix information exposure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 223-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2003 http://www.debian.org/security/faq -...

DSA-220 squirrelmail - cross site scripting

Bulletin has no description...

[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 215-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23th, 2002 http://www.debian.org/security/faq -...

DSA-206 tcpdump - denial of service

Bulletin has no description...

[SECURITY] [DSA 202-2] New IM packages correct hidden architecture dependency

-------------------------------------------------------------------------- Debian Security Advisory DSA 202-2 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2002 http://www.debian.org/security/faq -...

SnortCenter 0.9.5 temp file naming problems...

Hello. I am releasing this very late, as SnortCenter v0.9.6 has been released for a few weeks now. This bug was discovered a couple of months ago, but not released at the request of Stefan Dens, the author of SnortCenter. SnortCenter is a php based tool for aggregating many snort sensors into one...

[SECURITY] [DSA 183-1] New krb5 packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 183-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2002 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: : Updated ypserv packages fixes memory leak

Updated ypserv packages which fix a memory leak are now available for Red Hat Linux 7.x and 6.2. ypserv is an NIS authentication server. ypserv versions before 2.5 contain a memory leak that can be triggered remotely. When someone requests a map that doesn't exist, a previous mapname may be leake...

DSA-173 bugzilla - privilege escalation

Bulletin has no description...

[SECURITY] [DSA 166-1] New purity packages fix potential buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 166-1 [email protected] http://www.debian.org/security/ Martin Schulze September 13th, 2002 http://www.debian.org/security/faq -...

sql injection vulnerability in WBB 2.0 RC1 and below

Hi, I discovered a serious vulnerability in Woltlab Burning Board 2.0 RC 1 and below some weeks ago. The latest version WBB 2.0 RC 2 seems not vulnerable, but there are still sites using vulnerable versiones. versions tested vulnerable WBB 2.0 RC 1 WBB 2.0 beta 5 WBB 2.0 beta 4 WBB 2.0 beta 3...

TinySSL Vendor Statement: Basic Constraints Vulnerability

TinySSL is an open source, compact 125k jar, SSLv3 client implementation written in Java 1.1+. Version 1.02 and earlier is vulnerable to the attack posted last week by Mike Benham: http://online.securityfocus.com/archive/1/286290 An updated version 1.03 has been posted which fixes this...

DSA-149 glibc - integer overflow

Bulletin has no description...

DSA-138 gallery - remote exploit

Bulletin has no description...

PT-2002-1447 · Apache · Apache +1

Name of the Vulnerable Software and Affected Versions: Apache versions 1.3 through 1.3.24 Apache versions 2.0 through 2.0.36 Description: The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes the software to...

Yahoo! Messenger contains buffer overflow in "message" field

Overview Yahoo! Messenger is an instant messaging client. There is a remotely exploitable buffer overflow vulnerability in the "message" field of Yahoo! Messenger. Description A remotely exploitable buffer overflow exists in the "message" field that may permit a remote attacker to execute arbitra...

[SECURITY] [DSA-123-1] listar buffer overflow

Package : listar Problem type : remote exploit Debian-specific: no Janusz Niewiadomski and Wojciech Purczynski reported a buffer overflow in the addressmatch of listar a listserv style mailing-list manager. This has been fixed in version 0.129a-2.potato1. wget url will fetch the file for you dpkg...

[SECURITY] [DSA-105-1] enscript creates temporary files insecurely

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-105-1 [email protected] http://www.debian.org/security/ Wichert Akkerman January 21, 2002 -...

Bounce vulnerability in SpoonFTP 1.1.0.1

The vulnerability: The FTP server is vulnerable to the FTP bounce attack, even against ports lower than 1024. Vendor Response: Pi-Soft have created a new version that among other things fix this vulnerability. Their response was very nice and quick. /Arne Vidstrom, http://ntsecurity.nu...

PT-2001-2592 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 3.0.1 Description: The issue concerns improper user authentication when Kerberos V is enabled. This could potentially allow remote attackers to login without being challenged. Recommendations: For versions prior to...