Section: .. / 0804-advisories /
| /// File Name: |
sa29666.txt |
Description:
|
Secunia Security Advisory - Fedora has issued an update for gnome-screensaver. This fixes a weakness, which can be exploited by malicious people with physical access to disclose potentially sensitive information.
| | Homepage: | http://secunia.com/advisories/29666/ | | File Size: | 2239 | | Last Modified: | Apr 4 16:56:23 2008 |
| MD5 Checksum: | ec029eb3ded53f56de44de644c761b9b |
|
| /// File Name: |
sa29673.txt |
Description:
|
Secunia Security Advisory - Russ McRee has reported a vulnerability in e-Classifieds, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/29673/ | | File Size: | 2232 | | Last Modified: | Apr 4 16:56:23 2008 |
| MD5 Checksum: | a8dcd64e08ad78bea1116ceb743a18ce |
|
| /// File Name: |
USN-598-1.txt |
Description:
|
Ubuntu Security Notice 598-1 - It was discovered that the CUPS administration interface contained a heap- based overflow flaw. A local attacker, and a remote attacker if printer sharing is enabled, could send a malicious request and possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS, 6.10, and 7.04. In Ubuntu 7.10, attackers would be isolated by the AppArmor CUPS profile. It was discovered that the hpgl filter in CUPS did not properly validate its input when parsing parameters. If a crafted HP-GL/2 file were printed, an attacker could possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS, 6.10, and 7.04. In Ubuntu 7.10, attackers would be isolated by the AppArmor CUPS profile. It was discovered that CUPS had a flaw in its managing of remote shared printers via IPP. A remote attacker could send a crafted UDP packet and cause a denial of service or possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS, 6.10, and 7.04. In Ubuntu 7.10, attackers would be isolated by the AppArmor CUPS profile. It was discovered that CUPS did not properly perform bounds checking in its GIF decoding routines. If a crafted GIF file were printed, an attacker could possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS, 6.10, and 7.04. In Ubuntu 7.10, attackers would be isolated by the AppArmor CUPS profile.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 23422 | | Related CVE(s): | CVE-2008-1373, CVE-2008-0047, CVE-2008-0053, CVE-2008-0882 | | Last Modified: | Apr 3 01:47:02 2008 |
| MD5 Checksum: | 3d4ed2daa34bf5032ac967c51449a280 |
|
| /// File Name: |
USN-588-2.txt |
Description:
|
Ubuntu Security Notice 588-2 - USN-588-1 fixed vulnerabilities in MySQL. In fixing CVE-2007-2692 for Ubuntu 6.06, additional improvements were made to make privilege checks more restrictive. As a result, an upstream bug was exposed which could cause operations on tables or views in a different database to fail. This update fixes the problem.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 6200 | | Related CVE(s): | CVE-2007-2692, CVE-2006-7232, CVE-2007-6303, CVE-2008-0226, CVE-2008-0227 | | Last Modified: | Apr 3 01:44:58 2008 |
| MD5 Checksum: | 0e465a8d84fe8c332aef57d16bde0de9 |
|
| /// File Name: |
glsa-200804-02.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200804-02 - The Oulu University discovered that bzip2 does not properly check offsets provided by the bzip2 file, leading to a buffer overread. Versions less than 1.0.5 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 3010 | | Related CVE(s): | CVE-2008-1372 | | Last Modified: | Apr 3 01:41:59 2008 |
| MD5 Checksum: | 58f950dfe94adb27c139a0a3b6c6b84b |
|
| /// File Name: |
MDVSA-2008-081.txt |
Description:
|
Mandriva Linux Security Advisory - A heap-based buffer overflow in CUPS 1.2.x and later was discovered by regenrecht of VeriSign iDenfense that could allow a remote attacker to execute arbitrary code via a crafted CGI search expression. A validation error in the Hp-GL/2 filter was also discovered. Finally, a vulnerability in how CUPS handled GIF files was found by Tomas Hoger of Red Hat, similar to previous issues corrected in PHP, gd, tk, netpbm, and SDL_image.
| | Homepage: | http://www.mandriva.com/security/ | | File Size: | 8797 | | Related CVE(s): | CVE-2008-0053, CVE-2008-0047, CVE-2008-1373 | | Last Modified: | Apr 3 01:41:48 2008 |
| MD5 Checksum: | 528584dba9753b6b54087d3eff95e9bd |
|
| /// File Name: |
AKLINK-SA-2008-005.txt |
Description:
|
Apache-SSL versions prior to apache_1.3.41+ssl_1.59 suffer from a memory disclosure vulnerability that may allow for privilege escalation.
| | Author: | Alexander Klink | | Homepage: | https://www.cynops.de/ | | File Size: | 5271 | | Related CVE(s): | CVE-2008-0555 | | Last Modified: | Apr 3 01:13:41 2008 |
| MD5 Checksum: | 2878008d9e266abac14534bd7ec467fe |
|
| /// File Name: |
SSRT080006.txt |
Description:
|
HP Security Bulletin - Potential security vulnerabilities have been identified in PostgreSQL versions 8.2.4 and earlier running on HP Internet Express for Tru64 UNIX. The vulnerabilities could be exploited to execute arbitrary code, elevation of privilege, or cause a Denial of Service (DoS).
| | Homepage: | http://www.hp.com/ | | File Size: | 6953 | | Related CVE(s): | CVE-2007-3278, CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 | | Last Modified: | Apr 3 01:07:41 2008 |
| MD5 Checksum: | 6dd7bac8e9064b173aa9ca45a9fdc5fa |
|
| /// File Name: |
SSRT080026.txt |
Description:
|
HP Security Bulletin - Potential security vulnerabilities have been identified with HP Select Identity software. The vulnerabilities could be exploited by an authenticated user to gain unauthorized access to other user accounts.
| | Homepage: | http://www.hp.com/ | | File Size: | 7313 | | Related CVE(s): | CVE-2008-0709 | | Last Modified: | Apr 3 01:06:37 2008 |
| MD5 Checksum: | e80411e7253ce945ff5e2ca6230942bd |
|
| /// File Name: |
sa29544.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in lighttpd, which can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/29544/ | | File Size: | 2398 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | a15353006b09ed5754bf03a304b11ca4 |
|
| /// File Name: |
sa29573.txt |
Description:
|
Secunia Security Advisory - Red Hat has issued an update for cups. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/29573/ | | File Size: | 2287 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | bcb266f597a5cdf71706f8244fe2510a |
|
| /// File Name: |
sa29587.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in Novell NetWare, which can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/29587/ | | File Size: | 2272 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | c5c7669fc07923b3244deb81a16f801b |
|
| /// File Name: |
sa29588.txt |
Description:
|
Secunia Security Advisory - Fedora has issued an update for phpMyAdmin. This fixes a vulnerability, which can potentially be exploited by malicious users to disclose sensitive information.
| | Homepage: | http://secunia.com/advisories/29588/ | | File Size: | 2193 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | f0339b86fca4bd70d3e6a569dff3c3a7 |
|
| /// File Name: |
sa29593.txt |
Description:
|
Secunia Security Advisory - NTOS-Team have discovered a vulnerability in AuraCMS, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/29593/ | | File Size: | 2392 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | d78b934d5947e8c8cfe8537285212552 |
|
| /// File Name: |
sa29597.txt |
Description:
|
Secunia Security Advisory - Fedora has issued an update for centerim. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/29597/ | | File Size: | 2163 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | e541c56e45c89be801cde95218d3d44a |
|
| /// File Name: |
sa29600.txt |
Description:
|
Secunia Security Advisory - Slackware has issued an update for xine-lib. This fixes some vulnerabilities, which potentially can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/29600/ | | File Size: | 2855 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | 8d687b423793948a1680e63149270131 |
|
| /// File Name: |
sa29615.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in suPHP, which can be exploited by malicious, local users to gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/29615/ | | File Size: | 2268 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | 0baf55cd2c722a9801df8a9c6d65f641 |
|
| /// File Name: |
sa29618.txt |
Description:
|
Secunia Security Advisory - Fedora has issued an update for seamonkey. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, disclose potentially sensitive information, conduct cross-site scripting and phishing attacks, and potentially compromise a user's system.
| | Homepage: | http://secunia.com/advisories/29618/ | | File Size: | 2406 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | a5ae3fe023bd6e87efb1e09d8b4fa5d1 |
|
| /// File Name: |
sa29624.txt |
Description:
|
Secunia Security Advisory - Dr.Crash has discovered some vulnerabilities in EasyNews, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks, and to disclose sensitive information.
| | Homepage: | http://secunia.com/advisories/29624/ | | File Size: | 3060 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | 3d25c13e35e834745dd781d0b8167943 |
|
| /// File Name: |
sa29626.txt |
Description:
|
Secunia Security Advisory - Ubuntu has issued an update for openssh. This fixes a vulnerability, which can be exploited by malicious, local users to disclose sensitive information.
| | Homepage: | http://secunia.com/advisories/29626/ | | File Size: | 17597 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | 29e3e30dbd7e247bb8da176313bff0d4 |
|
| /// File Name: |
sa29628.txt |
Description:
|
Secunia Security Advisory - IRCRASH has discovered a vulnerability in Faphoto, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/29628/ | | File Size: | 2310 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | 86f3e79de155d26e14160d3f1ce43219 |
|
| /// File Name: |
sa29629.txt |
Description:
|
Secunia Security Advisory - Ray has discovered a vulnerability in NoticeWare Email Server, which can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/29629/ | | File Size: | 2245 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | e5efc5e1fc45c796729a438c58e1cff0 |
|
| /// File Name: |
sa29630.txt |
Description:
|
Secunia Security Advisory - Red Hat has issued an update for cups. This fixes some vulnerabilities, which potentially can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/29630/ | | File Size: | 2368 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | 192510e3813c39c1348479ec6cf8c7bf |
|
| /// File Name: |
sa29634.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for cups. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/29634/ | | File Size: | 2123 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | 245fe5fc6b4058bf4817b845673d3b4b |
|
| /// File Name: |
sa29638.txt |
Description:
|
Secunia Security Advisory - HP has acknowledged some vulnerabilities in PostgreSQL, which can be exploited by malicious users to to gain escalated privileges or to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/29638/ | | File Size: | 2184 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | 7b5be2cbcbf4685511a246c01e63d00e |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
