Debian DSA-1136-1 : gpdf - wrong input sanitising

'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which are also present in gpdf, the viewer with Gtk bindings, and which can lead to a denial of service by crashing the application or possibly to the execution of...

PHP invalid has table value deletion vulnerability

Wrong element with same hash value but different class may be removed from hash table...

security flaw

Linux kernel before 2.6.16.5 does not properly handle uncanonical return addresses on Intel EM64T CPUs, which reports an exception in the SYSRET instead of the next instruction, which causes the kernel exception handler to run on the user stack with the wrong GS...

security flaw

zendhashdelkeyorindex in zendhash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zendhashdel to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations...

CVE-2006-3017: Undefined Security Weakness

zendhashdelkeyorindex in zendhash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zendhashdel to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations...

DEBIAN-CVE-2006-2775

Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL...

CVE-2006-2775

Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL...

CVE-2006-2775

Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL...

CVE-2005-4310: Undefined Security Weakness

SSH Tectia Server 5.0.0 A, F, and T, when allowing host-based authentication only, allows users to log in with the wrong credentials...

Debian DSA-830-1 : ntlmaps - wrong permissions

Drew Parsons noticed that the post-installation script of ntlmaps, an NTLM authorisation proxy server, changes the permissions of the configuration file to be world-readable. It contains the user name and password of the Windows NT system that ntlmaps connects to and, hence, leaks them to local...

CVE-2005-2517

Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site...

Debian DSA-720-1 : smartlist - wrong input processing

Jeroen van Wolffelaar noticed that the confirm add-on of SmartList, the listmanager used on lists.debian.org, which is used on that host as well, could be tricked to subscribe arbitrary addresses to the lists. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[SECURITY] [DSA 720-1] New smartlist packages fix unauthorised un/subscription

-------------------------------------------------------------------------- Debian Security Advisory DSA 720-1 [email protected] http://www.debian.org/security/ Martin Schulze May 3rd, 2005 http://www.debian.org/security/faq -...

Logon with wrong user/password gives 'weird' errorpage.

Error screen after wrong login is 'weird'...

[SECURITY] [DSA 606-1] New nfs-utils packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 606-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2004 http://www.debian.org/security/faq -...

Debian DSA-555-1 : freenet6 - wrong file permissions

Simon Josefsson noticed that the tspc.conf configuration file in freenet6, a client to configure an IPv6 tunnel to freenet6.net, is set world readable. This file can contain the username and the password used to contact the IPv6 tunnelbroker freenet6.net. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 555-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 555-1] New frenet6 packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 555-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2004 http://www.debian.org/security/faq -...

DEBIAN-CVE-2004-0657

Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...

CVE-2004-0657: Integer Overflow or Wraparound

Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...