[SECURITY] [DSA 3654-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3654-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 26, 2016 https://www.debian.org/security/faq -...

CVE-2015-3438

Multiple cross-site scripting XSS vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a 1 four-byte UTF-8 character or 2 invalid character that reaches the database layer, as demonstrated by a crafted...

[SECURITY] [DSA 2797-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2797-1 [email protected] http://www.debian.org/security/ Michael Gilbert November 16, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2796-1 (torque - arbitrary code execution)

Matt Ezell from Oak Ridge National Labs reported a vulnerability in torque, a PBS-derived batch processing queueing system. A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these comman...

[SECURITY] [DSA 2576-1] trousers security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2576-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 23, 2012 http://www.debian.org/security/faq -...

DSA-2146-1 mydms - directory traversal

Bulletin has no description...

DEBIAN-CVE-2008-5616

Stack-based buffer overflow in the demuxopenvqf function in libmpdemux/demuxvqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file...

TCL/TK Tk工具包ReadImage()函数GIF文件解析栈溢出漏洞

BUGTRAQ ID: 27655 CVECAN ID: CVE-2008-0553 Tcl是一种简明，高效，可移植的编程语言。 在Tcl的Tk工具包中，tkImgGIF.c文件的ReadImage函数没有正确地验证从GIF图形中所读取的initialCodeSize值。如果用户受骗打开了恶意的GIF图形文件的话，就可能触发栈溢出，导致执行任意指令。 John Ousterhout Tcl 8.5.1 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1491-1）以及相应补丁: DSA-1491-1：New tk8.4 packages fix...

Debian Security Advisory DSA 797-2 (zsync)

The remote host is missing an update to zsync announced via advisory DSA 797-2. OpenVAS Vulnerability Test $Id: deb7972.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 797-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

DEBIAN-CVE-2007-2799

Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert statement. NOTE: this issue is due to an...

[SECURITY] [DSA 476-1] New heimdal packages fix cross-realm vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 476-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA-337-1] New gtksee packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 337-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 29th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-318-1] New lyskom-server packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 318-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 12th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0308

The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via 1 expn, 2 checksendmail, or 3 doublebounce.pl...

[SECURITY] [DSA 221-1] New mhonarc packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 221-1 [email protected] http://www.debian.org/security/ Martin Schulze January 3rd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 173-1] New bugzilla packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 173-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 101-1] New sudo packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 101-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2002 - -------------------------------------------------------------------------- Package : sudo...

CVE-2000-0367

Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges...

Linux Kernel 2.0.x (Debian 2.1 / RedHat 5.2) - Packet Length with Options

/ source: https://www.securityfocus.com/bid/870/info Debian 2.1,Linux kernel 2.0.34/2.0.35/2.0.36/2.0.37/2.0.38,RedHat 5.2 i386 Packet Length with Options Vulnerability A vulnerability in the Linux kernel's TCP/IP allows local users to crash, hang or corrupt the system. A local user can crash, ha...

[SECURITY] new version isdnutils fixes exploitable xmonisdn

We have received reports that the version of xmonisdn as distributed in the isndutils package from Debian GNU/Linux 2.1 has a security problem. Xmonisdn is an X applet that shows the status of the ISDN links. You can configure it to run two scripts when the left or right mouse button are clicked ...