.:[ packet storm ]:.
                             
the vulnerability safehouse
the vulnerability safehouse

 Section:  .. / 0507-advisories  /

Page 4 of 16
<< 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 >> Files 75 - 100 of 393
Currently sorted by: File NameSort By: Last Modified, File Size

 ///  File Name: glsa-200507-04.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-04 - RealPlayer is vulnerable to a heap overflow when opening RealMedia files which make use of RealText. Versions less than 10.0.5 are affected.
Homepage:http://security.gentoo.org
File Size:3253
Related CVE(s):CAN-2005-1766
Last Modified:Jul 7 10:20:19 2005
MD5 Checksum:e45232a06ea075709e916ddec19cecb5

 ///  File Name: glsa-200507-05.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-05 - Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a buffer overflow in zlib. A bounds checking operation failed to take invalid data into account, allowing a specifically malformed deflate data stream to overrun a buffer. Versions less than 1.2.2-r1 are affected.
Homepage:http://security.gentoo.org
File Size:3316
Related CVE(s):CAN-2005-2096
Last Modified:Jul 7 10:21:04 2005
MD5 Checksum:69d1f1db4f025b262739ec8591d026e7

 ///  File Name: glsa-200507-06.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-06 - TikiWiki is vulnerable to arbitrary command execution as described in GLSA 200507-01. Versions less than 1.8.5-r1 are affected.
Homepage:http://security.gentoo.org
File Size:2594
Related CVE(s):CAN-2005-1921
Last Modified:Jul 7 10:51:43 2005
MD5 Checksum:eb96b1ef4bc4f78be8de2e692003feea

 ///  File Name: glsa-200507-07.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-07 - phpWebSite fails to sanitize input sent to the XML-RPC server using the POST method. Other unspecified vulnerabilities have been discovered by Diabolic Crab of Hackers Center. Versions less than 0.10.1-r1 are affected.
Homepage:http://security.gentoo.org
File Size:2762
Related CVE(s):CAN-2005-1921
Last Modified:Jul 12 16:20:46 2005
MD5 Checksum:0d8171b5d6fb0009c95e447adf808ec0

 ///  File Name: glsa-200507-08.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-08 - The XML-RPC implementations of phpGroupWare and eGroupWare fail to sanitize input sent to the XML-RPC server using the POST method. Versions less than 0.9.16.006 are affected.
Homepage:http://security.gentoo.org
File Size:3091
Related CVE(s):CAN-2005-1921
Last Modified:Jul 12 16:27:30 2005
MD5 Checksum:0f323fd38a350e39009397d836279631

 ///  File Name: glsa-200507-09.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-09 - A buffer overflow has been discovered in the UnixAppOpenFilePerform() function, which is called when Adobe Acrobat Reader tries to open a file with the \Filespec tag. Versions less than or equal to 5.10 are affected.
Homepage:http://security.gentoo.org
File Size:2874
Related CVE(s):CAN-2005-1625
Last Modified:Jul 12 16:42:33 2005
MD5 Checksum:8e73681c04f3da92848f2808d8b80e06

 ///  File Name: glsa-200507-11.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-11 - Daniel Wachdorf discovered that MIT Kerberos 5 could corrupt the heap by freeing unallocated memory when receiving a special TCP request (CAN-2005-1174). He also discovered that the same request could lead to a single-byte heap overflow (CAN-2005-1175). Magnus Hagander discovered that krb5_recvauth() function of MIT Kerberos 5 might try to double-free memory (CAN-2005-1689). Versions less than 1.4.1-r1 are affected.
Homepage:http://security.gentoo.org
File Size:3458
Related CVE(s):CAN-2005-1174, CAN-2005-1175, CAN-2005-1689
Last Modified:Jul 13 08:52:52 2005
MD5 Checksum:052e264a3f340deaae419d4b7e9f62ae

 ///  File Name: glsa-200507-12.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-12 - Bugzilla allows any user to modify the flags of any bug (CAN-2005-2173). Bugzilla inserts bugs into the database before marking them as private, in connection with MySQL replication this could lead to a race condition (CAN-2005-2174). Versions less than 2.18.3 are affected.
Homepage:http://security.gentoo.org
File Size:3040
Related CVE(s):CAN-2005-2173, CAN-2005-2174
Last Modified:Jul 14 08:00:26 2005
MD5 Checksum:bd222c90ef9d2a19afe2363aba263912

 ///  File Name: glsa-200507-13.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-13 - Rob Holland of the Gentoo Security Audit Team discovered that pam_ldap and nss_ldap fail to use TLS for referred connections if they are referred to a master after connecting to a slave, regardless of the ssl start_tls ldap.conf setting. Versions less than 239-r1 are affected.
Homepage:http://security.gentoo.org
File Size:3379
Related CVE(s):CAN-2005-2069
Last Modified:Jul 15 07:23:51 2005
MD5 Checksum:93f4108556b7a42d38c62c4455cb042f

 ///  File Name: glsa-200507-14.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-14 - Several vulnerabilities in Mozilla Firefox allow attacks ranging from execution of script code with elevated privileges to information leak. Versions less than 1.0.5 are affected.
Homepage:http://security.gentoo.org
File Size:4959
Last Modified:Jul 15 18:25:05 2005
MD5 Checksum:f55bab1ae1d310e80b691f1654e128c4

 ///  File Name: glsa-200507-15.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-15 - James Bercegay has discovered that the XML-RPC implementation in PHP fails to sanitize input passed in an XML document, which is used in an eval() statement. Versions less than 4.4.0 are affected.
Homepage:http://security.gentoo.org
File Size:3405
Related CVE(s):CAN-2005-1921
Last Modified:Jul 15 18:27:17 2005
MD5 Checksum:e5678e67bf38f46776e76ca1cb9e55f6

 ///  File Name: glsa-200507-16.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-16 - infamous42md discovered that dhcpcd can be tricked to read past the end of the supplied DHCP buffer. As a result, this might lead to a crash of the daemon. Versions less than 1.3.22_p4-r11 are affected.
Homepage:http://security.gentoo.org
File Size:2593
Related CVE(s):CAN-2005-1848
Last Modified:Jul 16 11:05:37 2005
MD5 Checksum:00382a8448322276046bd8b0bd3e4793

 ///  File Name: glsa-200507-17.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-17 - Several vulnerabilities in Mozilla Thunderbird allow attacks ranging from execution of script code with elevated privileges to information leak. Versions less than 1.0.5 are affected.
Homepage:http://security.gentoo.org
File Size:4291
Related CVE(s):CAN-2005-0989
Last Modified:Jul 19 16:26:36 2005
MD5 Checksum:0a63346ec652a62550b6b040f406b571

 ///  File Name: glsa-200507-18.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-18 - MediaWiki fails to escape a parameter in the page move template correctly. Versions less than 1.4.7 are affected.
Homepage:http://security.gentoo.org
File Size:2585
Last Modified:Jul 21 07:57:23 2005
MD5 Checksum:64ffb993408d32b9a868c37fd8cf431c

 ///  File Name: glsa-200507-19.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-19 - zlib improperly handles invalid data streams which could lead to a buffer overflow. Versions less than 1.2.3 are affected.
Homepage:http://security.gentoo.org
File Size:3025
Related CVE(s):CAN-2005-1849
Last Modified:Jul 22 09:10:54 2005
MD5 Checksum:d133450db2b845e69b8e76303789730d

 ///  File Name: glsa-200507-20.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-20 - Shorewall fails to enforce security policies if configured with MACLIST_DISPOSITION set to ACCEPT or MACLIST_TTL set to a value greater or equal to 0. Versions less than 2.4.1 are affected.
Homepage:http://security.gentoo.org
File Size:3258
Related CVE(s):CAN-2005-2317
Last Modified:Jul 22 09:11:13 2005
MD5 Checksum:4db84af73320fc582f340f12d1081730

 ///  File Name: glsa-200507-21.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-21 - fetchmail does not properly validate UIDs coming from a POP3 mail server. The UID is placed in a fixed length buffer on the stack, which can be overflown. Versions less than 6.2.5.2 are affected.
Homepage:http://security.gentoo.org
File Size:2701
Related CVE(s):CAN-2005-2335
Last Modified:Jul 28 07:51:51 2005
MD5 Checksum:8dc31d9667f9a16608485901c38ebd87

 ///  File Name: glsa-200507-22.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-22 - The Gentoo Linux Security Audit Team discovered that the sandbox utility was vulnerable to multiple TOCTOU (Time of Check, Time of Use) file creation race conditions. Versions less than 1.2.11 are affected.
Homepage:http://security.gentoo.org
File Size:2355
Last Modified:Jul 28 07:52:12 2005
MD5 Checksum:d714908c4e980e691f90b3f29352f347

 ///  File Name: glsa-200507-23.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-23 - Kopete contains an internal copy of libgadu and is therefore subject to several input validation vulnerabilities in libgadu. Versions less than 3.4.1-r1 are affected.
Homepage:http://security.gentoo.org
File Size:3161
Related CVE(s):CAN-2005-1852
Last Modified:Jul 28 07:52:38 2005
MD5 Checksum:80d4a5d16ae62b0fcc165725ece0ccd0

 ///  File Name: glsa-200507-24.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-24 - Several vulnerabilities in the Mozilla Suite allow attacks ranging from the execution of javascript code with elevated privileges to information leakage. Versions less than 1.7.10 are affected.
Homepage:http://security.gentoo.org
File Size:4666
Last Modified:Jul 28 08:27:49 2005
MD5 Checksum:16e6b46c85bd8d2cddb3efc3df1322c0

 ///  File Name: glsa-200507-25.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-25 - Neel Mehta and Alex Wheeler discovered that Clam AntiVirus is vulnerable to integer overflows when handling the TNEF, CHM and FSG file formats. Versions less than 0.86.2 are affected.
Homepage:http://security.gentoo.org
File Size:2808
Last Modified:Jul 28 08:29:14 2005
MD5 Checksum:03a476cb27b0196cd4aa907828b438c9

 ///  File Name: glsa-200507-26.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-26 - GNU Gadu, CenterICQ, Kadu, EKG and libgadu are vulnerable to an integer overflow. Versions less than 2.2.6-r1 are affected.
Homepage:http://security.gentoo.org
File Size:3964
Related CVE(s):CAN-2005-1852
Last Modified:Jul 28 08:37:09 2005
MD5 Checksum:ab1052b856beb7d0d10837f8a7590396

 ///  File Name: glsa-200507-27.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-27 - Ethereal is vulnerable to numerous vulnerabilities potentially resulting in the execution of arbitrary code or abnormal termination. Versions less than 0.10.12 are affected.
Homepage:http://security.gentoo.org
File Size:3995
Related CVE(s):CAN-2005-2360, CAN-2005-2361, CAN-2005-2362, CAN-2005-2363, CAN-2005-2364, CAN-2005-2365, CAN-2005-2366, CAN-2005-2367
Last Modified:Jul 28 18:54:02 2005
MD5 Checksum:4612039aea857070ea4f64d4d373a37d

 ///  File Name: glsa-200507-28.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-28 - Earlier versions of emul-linux-x86-baselibs contain a vulnerable version of zlib, which may lead to a buffer overflow. Versions less than 2.2 are affected.
Homepage:http://security.gentoo.org/
File Size:3119
Related CVE(s):CAN-2005-1849, CAN-2005-2096
Last Modified:Aug 5 07:50:52 2005
MD5 Checksum:3f77347d96c2f73b5e43b01a21f6bf23

 ///  File Name: glsa-200507-29.txt
Description:
Gentoo Linux Security Advisory GLSA 200507-29 - Max Vozeler reported that pstotext calls the GhostScript interpreter on untrusted PostScript files without specifying the -dSAFER option. Versions less than 1.8g-r1 are affected.
Homepage:http://security.gentoo.org/
File Size:2580
Last Modified:Aug 5 07:57:25 2005
MD5 Checksum:5cc93bfca53ae8b32a433ef8ca3de8e0