GLSA-200903-11 : PyCrypto: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200903-11 PyCrypto: Execution of arbitrary code Mike Wiacek of the Google Security Team reported a buffer overflow in the ARC2 module when processing a large ARC2 key length. Impact : A remote attacker could entice a user or...

GLSA-200810-03 : libspf2: DNS response buffer overflow

The remote host is affected by the vulnerability described in GLSA-200810-03 libspf2: DNS response buffer overflow libspf2 uses a fixed-length buffer to receive DNS responses and does not properly check the length of TXT records, leading to buffer overflows. Impact : A remote attacker could store...

GLSA-200803-20 : International Components for Unicode: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-20 International Components for Unicode: Multiple vulnerabilities Will Drewry Google Security reported a vulnerability in the regular expression engine when using back references to capture \0 characters CVE-2007-4770. He...

GLSA-200801-01 : unp: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-200801-01 unp: Arbitrary command execution Erich Schubert from Debian discovered that unp does not escape file names properly before passing them to calls of the shell. Impact : A remote attacker could entice a user or automated...

GLSA-200710-10 : SKK Tools: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200710-10 SKK Tools: Insecure temporary file creation skkdic-expr.c insecurely writes temporary files to a location in the form $TMPDIR/skkdic$PID.pag,dir,db, where $PID is the process ID. Impact : A local attacker could create...

GLSA-200708-11 : Lighttpd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-11 Lighttpd: Multiple vulnerabilities Stefan Esser discovered errors with evidence of memory corruption in the code parsing the headers. Several independent researchers also reported errors involving the handling of HTTP...

GLSA-200708-03 : libarchive (formerly named as bsdtar): Multiple PaX Extension Header Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-03 libarchive formerly named as bsdtar: Multiple PaX Extension Header Vulnerabilities CPNI, CERT-FI, Tim Kientzle, and Colin Percival reported a buffer overflow CVE-2007-3641, an infinite loop CVE-2007-3644, and a NULL...

GLSA-200701-24 : VLC media player: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200701-24 VLC media player: Format string vulnerability Kevin Finisterre has discovered that when handling media locations, various functions throughout VLC media player make improper use of format strings. Impact : An attacker...

GLSA-200612-04 : ModPlug: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200612-04 ModPlug: Multiple buffer overflows Luigi Auriemma has reported various boundary errors in loadit.cpp and a boundary error in the 'CSoundFile::ReadSample' function in sndfile.cpp. Impact : A remote attacker can entice a...

GLSA-200612-09 : MadWifi: Kernel driver buffer overflow

The remote host is affected by the vulnerability described in GLSA-200612-09 MadWifi: Kernel driver buffer overflow Laurent Butti, Jerome Raznieski and Julien Tinnes reported a buffer overflow in the encodeie and the giwscancb functions from ieee80211wireless.c. Impact : A remote attacker could...

GLSA-200611-05 : Netkit FTP Server: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200611-05 Netkit FTP Server: Privilege escalation Paul Szabo reported that an incorrect seteuid call after the chdir function can allow an attacker to access a normally forbidden directory, in some very particular circumstances, f...

GLSA-200602-06 : ImageMagick: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200602-06 ImageMagick: Format string vulnerability The SetImageInfo function was found vulnerable to a format string mishandling. Daniel Kobras discovered that the handling of '%'-escaped sequences in filenames passed to the...

GLSA-200511-20 : Horde Application Framework: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200511-20 Horde Application Framework: XSS vulnerability The Horde Team reported a potential XSS vulnerability. Horde fails to properly escape error messages which may lead to displaying unsanitized error messages via...

GLSA-200508-01 : Compress::Zlib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200508-01 Compress::Zlib: Buffer overflow Compress::Zlib 1.34 contains a local vulnerable version of zlib, which may lead to a buffer overflow. Impact : By creating a specially crafted compressed data stream, attackers can overwri...