Section: .. / 0804-advisories /
| /// File Name: |
glsa-200804-30.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200804-30 - Vulnerabilities have been reported in the processing of user-controlled data by start_kdeinit, which is setuid root by default. Versions less than 4.0 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2858 | | Related CVE(s): | CVE-2008-1671 | | Last Modified: | Apr 29 19:47:11 2008 |
| MD5 Checksum: | 7cb96af75e50047c4cb88e232efaed5a |
|
| /// File Name: |
sa29600.txt |
Description:
|
Secunia Security Advisory - Slackware has issued an update for xine-lib. This fixes some vulnerabilities, which potentially can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/29600/ | | File Size: | 2855 | | Last Modified: | Apr 3 00:45:58 2008 |
| MD5 Checksum: | 8d687b423793948a1680e63149270131 |
|
| /// File Name: |
sa29631.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in Borland CaliberRM, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/29631/ | | File Size: | 2852 | | Last Modified: | Apr 4 16:56:23 2008 |
| MD5 Checksum: | 4ee80f58bb780c91f69992271f90077f |
|
| /// File Name: |
sa29828.txt |
Description:
|
Secunia Security Advisory - Red Hat has issued an update for seamonkey. This fixes a vulnerability, which can potentially be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/29828/ | | File Size: | 2845 | | Last Modified: | Apr 18 14:12:52 2008 |
| MD5 Checksum: | e1ae6050d611dd9882eb28a24fa85ee2 |
|
| /// File Name: |
sa29657.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in SCO UnixWare, which can be exploited by malicious, local users to gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/29657/ | | File Size: | 2833 | | Last Modified: | Apr 4 18:56:42 2008 |
| MD5 Checksum: | 707110437162ca8b4ab6a704a62db2cc |
|
| /// File Name: |
sa29848.txt |
Description:
|
Secunia Security Advisory - Debian has issued an update for roundup. This fixes some vulnerabilities, which have unknown impacts.
| | Homepage: | http://secunia.com/advisories/29848/ | | File Size: | 2818 | | Last Modified: | Apr 28 10:37:56 2008 |
| MD5 Checksum: | 4dd9eb520455e5772b9649edc11c0e04 |
|
| /// File Name: |
sa30005.txt |
Description:
|
Secunia Security Advisory - Core Security Technologies has reported a vulnerability in BitDefender Antivirus 2008, which can be exploited by malicious, local users to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/30005/ | | File Size: | 2818 | | Last Modified: | Apr 29 19:20:27 2008 |
| MD5 Checksum: | 223b4bd35423ccef51c58f60b25c4c43 |
|
| /// File Name: |
sa29996.txt |
Description:
|
Secunia Security Advisory - Core Security Technologies has reported a vulnerability in Sophos Anti-Virus, which can be exploited by malicious, local users to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/29996/ | | File Size: | 2811 | | Last Modified: | Apr 29 19:20:27 2008 |
| MD5 Checksum: | 7448ca3a9c6eb6ed486d8c8fdf84a4bd |
|
| /// File Name: |
sa29671.txt |
Description:
|
Secunia Security Advisory - A vulnerability and a security issue have been reported in GNU M4, which can be exploited by malicious people to manipulate certain data or to potentially compromise a user's system.
| | Homepage: | http://secunia.com/advisories/29671/ | | File Size: | 2809 | | Last Modified: | Apr 8 22:22:39 2008 |
| MD5 Checksum: | efff05758ed0c0d0b164882a84cd0749 |
|
| /// File Name: |
sa29735.txt |
Description:
|
Secunia Security Advisory - SUSE has issued an update for openssh and opera. This fixes some vulnerabilities and a weakness, which can be exploited by malicious, local users to disclose potentially sensitive information and bypass certain security restrictions, and potentially by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/29735/ | | File Size: | 2802 | | Last Modified: | Apr 14 19:01:25 2008 |
| MD5 Checksum: | ec051b29744a63dfede969177693e682 |
|
| /// File Name: |
sa29708.txt |
Description:
|
Secunia Security Advisory - Luke Jennings has reported a weakness in some WatchGuard Firebox products, which can be exploited by malicious people to determine valid usernames.
| | Homepage: | http://secunia.com/advisories/29708/ | | File Size: | 2800 | | Last Modified: | Apr 10 10:08:38 2008 |
| MD5 Checksum: | 8eddc22c04eb9becf54ed2b30306638e |
|
| /// File Name: |
glsa-200804-11.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200804-11 - Chris Howells reported that policyd-weight creates and uses the /tmp/.policyd-weight/ directory in an insecure manner. Versions less than 0.1.14.17 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2796 | | Related CVE(s): | CVE-2008-1569 | | Last Modified: | Apr 11 14:58:10 2008 |
| MD5 Checksum: | 5762e629bb6bd67552b174bf0aeb900e |
|
| /// File Name: |
oCERT-2008-004.txt |
Description:
|
The reference speex decoder from the Speex library performs insufficient boundary checks on a header structure read from user input, this has been reported in oCERT-2008-002 advisory. Further investigation showed that several packages include similar code and are therefore vulnerable.
| | Author: | Andrea Barisani | | Homepage: | http://www.ocert.org/ | | File Size: | 2793 | | Related CVE(s): | CVE-2008-1686 | | Last Modified: | Apr 17 12:58:01 2008 |
| MD5 Checksum: | 51e341fb5d9d1dddb0849ae4adcf0490 |
|
| /// File Name: |
sa29960.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in the E-Publish module for Drupal, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks.
| | Homepage: | http://secunia.com/advisories/29960/ | | File Size: | 2793 | | Last Modified: | Apr 28 10:37:56 2008 |
| MD5 Checksum: | 0de83581dbba98ed1d0a62d49672b05a |
|
| /// File Name: |
sa29718.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in HP Integrity Servers, which can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/29718/ | | File Size: | 2791 | | Last Modified: | Apr 8 23:38:37 2008 |
| MD5 Checksum: | 08651b6d780cf1d15cc9b471d313c5ff |
|
| /// File Name: |
sa29952.txt |
Description:
|
Secunia Security Advisory - Juan Pablo Lopez Yacubian has discovered a vulnerability in Trillian, which potentially can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/29952/ | | File Size: | 2791 | | Last Modified: | Apr 28 10:37:56 2008 |
| MD5 Checksum: | 6ef87b213152327dec3bc9579bcdcb9e |
|
| /// File Name: |
sa29988.txt |
Description:
|
Secunia Security Advisory - Sun has acknowledged some vulnerabilities in Solaris, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/29988/ | | File Size: | 2791 | | Last Modified: | Apr 28 18:12:57 2008 |
| MD5 Checksum: | 4893c5d91ffc4a491579b2a4c0430977 |
|
| /// File Name: |
sa27763.txt |
Description:
|
Secunia Security Advisory - Secunia Research has discovered some vulnerabilities in Symantec Mail Security for Domino and Symantec Mail Security for Exchange, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/27763/ | | File Size: | 2789 | | Last Modified: | Apr 8 22:22:39 2008 |
| MD5 Checksum: | 5a5296c2a963690f18ca5ceb6c06f77e |
|
| /// File Name: |
glsa-200804-18-02.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200804-18:02 - Kees Cook from the Ubuntu Security Team reported that the CairoFont::create() function in the file CairoFontEngine.cc does not verify the type of an embedded font object inside a PDF file before dereferencing a function pointer from it. Versions less than 0.6.3 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2767 | | Related CVE(s): | CVE-2008-1693 | | Last Modified: | Apr 17 13:00:06 2008 |
| MD5 Checksum: | 612bdd38fe87f5366161e2398640c274 |
|
| /// File Name: |
glsa-200804-12.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200804-12 - gnome-screensaver incorrectly handles the results of the getpwuid() function in the file src/setuid.c when using directory servers (like NIS) during a network outage, a similar issue to GLSA 200705-14. Versions less than 2.20.0-r3 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2764 | | Related CVE(s): | CVE-2008-0887 | | Last Modified: | Apr 11 14:58:35 2008 |
| MD5 Checksum: | ab6bc79e8b70fbf6f2ad14079d573777 |
|
| /// File Name: |
sa29883.txt |
Description:
|
Secunia Security Advisory - Slackware has issued an update for mozilla-firefox. This fixes a vulnerability, which can potentially be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/29883/ | | File Size: | 2764 | | Last Modified: | Apr 28 10:37:56 2008 |
| MD5 Checksum: | ece61fcd09526cb09136bf857f7e6550 |
|
| /// File Name: |
sa29675.txt |
Description:
|
Secunia Security Advisory - poplix has reported some vulnerabilities in Parallels VZPP, which can be exploited by malicious people to conduct cross-site request forgery attacks and potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/29675/ | | File Size: | 2763 | | Last Modified: | Apr 15 21:46:04 2008 |
| MD5 Checksum: | a9468ce7cd053f4ff5a027330dc92641 |
|
| /// File Name: |
glsa-200804-24.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200804-24 - A vulnerability in DBMail's authldap module when used in conjunction with an Active Directory server has been reported by vugluskr. When passing a zero length password to the module, it tries to bind anonymously to the LDAP server. If the LDAP server allows anonymous binds, this bind succeeds and results in a successful authentication to DBMail. Versions less than 2.2.9 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2755 | | Related CVE(s): | CVE-2007-6714 | | Last Modified: | Apr 18 20:46:17 2008 |
| MD5 Checksum: | 2edb54c08de10fad088f964f33d07e1a |
|
| /// File Name: |
sa29730.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in Sun Solaris, which can be exploited by malicious people to bypass certain security restrictions.
| | Homepage: | http://secunia.com/advisories/29730/ | | File Size: | 2749 | | Last Modified: | Apr 15 13:23:16 2008 |
| MD5 Checksum: | a0e0e2f8f1a940bb186adf417658ba9a |
|
| /// File Name: |
sa29875.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been discovered in Exponent CMS, which can be exploited by malicious people to conduct script insertion attacks.
| | Homepage: | http://secunia.com/advisories/29875/ | | File Size: | 2748 | | Last Modified: | Apr 18 17:03:36 2008 |
| MD5 Checksum: | ebe52978518a88d943339554b2392d16 |
|
|
|
|
|