Debian Essential And Critical Security Patch Updates - Page 283

Debian: snort multiple vulnerabilities

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Two vulnerabilities have been discoverd in Snort.

LinuxSecurity.com Team
May 01, 2003

Debian: UPDATED: mime-support insecure tmp file vulnerability

This update fixes the second problem from the original advisory.

LinuxSecurity.com Team
May 01, 2003

Debian: kdebase pdf/ps vulnerability

The KDE team discoverd a vulnerability in the way KDE uses Ghostscript software for processing of PostScript (PS) and PDF files.

LinuxSecurity.com Team
Apr 30, 2003

Debian: pptpd buffer overflow vulnerability

By specifying a small packet length an attacker is able to overflow a buffer and execute code under the user id that runs pptpd, probably root.

LinuxSecurity.com Team
Apr 30, 2003

Debian: gkrellm multiple vulnerablilites

There are multiple vulnerabilities in gkrellm.

LinuxSecurity.com Team
Apr 24, 2003

Debian: kdelibs insecure execution vulnerability

The KDE team discoverd a vulnerability in the way KDE uses Ghostscript software for processing of PostScript (PS) and PDF files.

LinuxSecurity.com Team
Apr 23, 2003

Debian: UPDATED: mime-support insecure tmp file creation vulnerability

Unfortunately yesterday's update for mime-support did not exactly work as expected, which requires an update.

LinuxSecurity.com Team
Apr 23, 2003

Debian: mime-support insecure tmp file creation vulnerability

When a temporary file is to be used it is created insecurely, allowing an attacker to overwrite arbitrary under the user id of the person executing run-mailcap, most probably root.

LinuxSecurity.com Team
Apr 22, 2003

Debian: ircii multiple vulnerabilities

There are multiple vulnerabilities in ircii.

LinuxSecurity.com Team
Apr 22, 2003

Debian: sendmail-wide buffer overflow vulnerability

There is a buffer overflow, triggered by a char to int conversion, in the address parsing code in sendmail.

LinuxSecurity.com Team
Apr 18, 2003

Debian: rinetd denial of service vulnerability

When the connection list is full, rinetd resizes the list in order to store the new incoming connection. However, this is done improperly, resulting in a denial of service and potentially execution of arbitrary code.

LinuxSecurity.com Team
Apr 17, 2003

Debian: openssl multiple vulnerabilities

Applications that are linked against the openssl library are generally vulnerable to attacks that could leak the server's private key or make the encrypted sessiondecryptable otherwise.