Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3protocols. If an attacker could perform a man in the middle attack at thestart of a TLS connection, the attacker could inject arbitrary contentat the beginning of the user's session. (CVE-2009-3555) [More...]
Sol Jerome discovered that the Kerberos kadmind service did not correctlyfree memory. An unauthenticated remote attacker could send speciallycrafted traffic to crash the kadmind process, leading to a denial ofservice. (CVE-2010-0629) [More...]
Stephane Chazelas discovered that libnss-db did not correctly set up adatabase environment. A local attacker could exploit this to read thefirst line of arbitrary files, leading to a loss of privacy and possiblyprivilege escalation. [More...]
Dan Rosenberg discovered that the email helper in Emacs did not correctlycheck file permissions. A local attacker could perform a symlink raceto read or append to another user's mailbox if it was stored under agroup-writable group-"mail" directory. [More...]
It was discovered the Samba handled symlinks in an unexpected way when both "wide links" and "UNIX extensions" were enabled, which is the default. A remote attacker could create symlinks and access arbitrary files from the server. [More...]
It was discovered that Puppet did not drop supplementary groups when being run as a different user. A local user may be able to use this flaw to bypass security restrictions and gain access to restricted files. (CVE-2009-3564) [More...]
Emmanuel Bouillon discovered that Kerberos did not correctly handlecertain message types. An unauthenticated remote attacker could sendspecially crafted traffic to cause the KDC to crash, leading to a denialof service. (CVE-2010-0283) [More...]
Several flaws were discovered in the JavaScript engine of Thunderbird. If a user had JavaScript enabled and were tricked into viewing malicious web content, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-0689, CVE-2009-2463, CVE-2009-3075) [More...]
Mathias Krause discovered that the Linux kernel did not correctly handlemissing ELF interpreters. A local attacker could exploit this to cause thesystem to crash, leading to a denial of service. (CVE-2010-0307) [More...]
It was discovered that Audio File Library contained a heap-based buffer overflow. If a user or automated system processed a crafted WAV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. The default compiler options for Ubuntu should reduce this [More...]
It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. (CVE-2009-2042) [More...]
It was discovered that several wiki actions and preference settings inMoinMoin were not protected from cross-site request forgery (CSRF). If anauthenticated user were tricked into visiting a malicious website whilelogged into MoinMoin, a remote attacker could change the user'sconfiguration or wiki content. (CVE-2010-0668, CVE-2010-0717) [More...]
William Grant discovered that dpkg-source did not safely apply diffswhen unpacking source packages. If a user or an automated system weretricked into unpacking a specially crafted source package, a remoteattacker could modify files outside the target unpack directory, leadingto a denial of service or potentially gaining access to the system. [More...]
It was discovered that mod_proxy_ajp did not properly handle errors when a client doesn't send a request body. A remote attacker could exploit this with a crafted request and cause a denial of service. This issue affected Ubuntu 8.04 LTS, 8.10, 9.04 and 9.10. (CVE-2010-0408) [More...]
It was discovered that gnome-screensaver did not correctly lock all screens when monitors get hotplugged. An attacker with physical access could use this flaw to gain access to a locked session. (CVE-2010-0285) [More...]
It was discovered that the CUPS scheduler did not properly handle certain network operations. A remote attacker could exploit this flaw and cause the CUPS server to crash, resulting in a denial of service. This issue only affected Ubuntu 8.04 LTS, 8.10, 9.04 and 9.10. (CVE-2009-3553, CVE-2010-0302) [More...]
It was discovered that sudo did not properly validate the path for the'sudoedit' pseudo-command. A local attacker could exploit this to executearbitrary code as root if sudo was configured to allow the attacker to usesudoedit. The sudoedit pseudo-command is not used in the defaultinstallation of Ubuntu. (CVE-2010-0426) [More...]
It was discovered that Squid incorrectly handled certain malformed packets received on the HTCP port. A remote attacker could exploit this with a specially-crafted packet and cause Squid to crash, resulting in a denial of service. [More...]
It was discovered that the XML HMAC signature system did not correctly check certain lengths. If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation. (CVE-2009-0217) [More...]
Fabian Yamaguchi discovered that Pidgin incorrectly validated all fields of an incoming message in the MSN protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. (CVE-2010-0277) [More...]
