.:[ packet storm ]:.
                             
security without boundaries
security without boundaries

 Section:  .. / 0507-advisories  /

Page 2 of 16
<< 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 >> Files 25 - 50 of 393
Currently sorted by: File NameSort By: Last Modified, File Size

 ///  File Name: cactiSQL086e-sql.txt
Description:
Cacti versions 0.8.6e and below suffer from multiple SQL injection vulnerabilities.
Author:Stefan Esser
File Size:5148
Last Modified:Jul 7 09:35:48 2005
MD5 Checksum:7e7bef22b99156c9f04e5141435a4aae

 ///  File Name: cisco-sa-20050712-ccm.txt
Description:
Cisco Security Advisory - Cisco CallManager 3.3 and earlier, 4.0, and 4.1 are vulnerable to Denial of Service (DoS) attacks, memory leaks, and memory corruption which may result in services being interrupted, servers rebooting, or arbitrary code being executed.
Homepage:http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml
File Size:14216
Last Modified:Jul 13 08:34:34 2005
MD5 Checksum:609c1ff4a15bf93a491b5cf1157193a9

 ///  File Name: cisco-sa-20050713-csa.txt
Description:
Cisco Security Advisory - Cisco Security Agent (CSA) is a network security software agent that provides threat protection for server and desktop computing systems. A malicious attacker may be able to send a crafted IP packet to a Windows workstation or server running CSA 4.5 which may cause the device to halt and/or reload.
Homepage:http://www.cisco.com/warp/public/707/cisco-sa-20050713-csa.shtml
File Size:8320
Last Modified:Jul 14 08:53:23 2005
MD5 Checksum:4c6b49eaadf59e1c244ffe2963cb62db

 ///  File Name: cisco-sa-20050713-ons.txt
Description:
Cisco Security Advisory - The Cisco ONS 15216 OADM (Optical Add/Drop Multiplexer) contains a vulnerability in the handling of telnet sessions that can cause a denial-of-service condition in the management plane. Traffic going through the Cisco ONS 15216 OADM (i.e. transit traffic), is not affected when the management plane is under a denial-of-service condition. However, clearing the denial-of-service condition on the management plane requires resetting the device, which impacts transit traffic.
Homepage:http://www.cisco.com/warp/public/707/cisco-sa-20050713-ons.shtml
File Size:10993
Last Modified:Jul 14 08:52:30 2005
MD5 Checksum:f5e9e7d1760c1b95781c5dbf517dd4c4

 ///  File Name: cisco-sa-20050729-ipv6.txt
Description:
Cisco Security Advisory - Cisco Internetwork Operating System (IOS) Software is vulnerable to a Denial of Service (DoS) and potentially an arbitrary code execution attack from a specifically crafted IPv6 packet. The packet must be sent from a local network segment. Only devices that have been explicitly configured to process IPv6 traffic are affected. Upon successful exploitation, the device may reload or be open to further exploitation.
Homepage:http://www.cisco.com/warp/public/707/cisco-sa-20050729-ipv6.shtml
File Size:30839
Last Modified:Aug 5 07:33:00 2005
MD5 Checksum:81aa26610de87bb904cf13a389cf7167

 ///  File Name: ciscoCallManager.txt
Description:
The Cisco Call Manager versions 3.2 and below may restart when more than 1 gigabyte of memory is used. Sending specially crafted packets to the CCM will cause the CCM to use more than 1 gigabyte of virtual memory.
Author:Jeff Fay
Homepage:http://www.patchadvisor.com
File Size:3444
Last Modified:Jul 21 07:53:05 2005
MD5 Checksum:34a58982f2fd1e5294f8d8c12c074ac9

 ///  File Name: clamav.pdf
Description:
Clam AntiVirus (ClamAV) versions 0.86.1 and below suffer from remote heap overflows.
Author:Neel Mehta, Alex Wheeler
File Size:21601
Last Modified:Jul 28 07:47:41 2005
MD5 Checksum:f9508af9cf88b63143dc1098b4e7655f

 ///  File Name: cleverAccess.txt
Description:
Clever Copy contains a flaw that allows for unauthorized reading and deletion of private message from other users. Versions 2.0 and 2.0a are affected.
Author:Lostmon
File Size:1964
Last Modified:Jul 28 09:03:19 2005
MD5 Checksum:4f2de0514d7c6b838f32ce512c04fc50

 ///  File Name: cybersourceBC.txt
Description:
CyberSource Business Center suffers from a user privilege escalation vulnerability that allows for theft due to a lack of input validation.
File Size:3550
Last Modified:Jul 23 18:25:43 2005
MD5 Checksum:c88588eeae10b557e214a3d753cd90c4

 ///  File Name: dsa-725-2.txt
Description:
Debian Security Advisory DSA 725-1 - Jens Steube discovered that ppxp, yet another PPP program, does not release root privileges when opening potentially user supplied log files. This can be tricked into opening a root shell.
Homepage:http://security.debian.org/
File Size:10270
Related CVE(s):CAN-2005-0392
Last Modified:Jul 7 09:58:30 2005
MD5 Checksum:ea0f1eb00dab1b2cd70ff988ca8e3be7

 ///  File Name: dsa-734-1.txt
Description:
Debian Security Advisory DSA 734-1 - Two denial of service problems have been discovered in Gaim, a multi-protocol instant messaging client.
Homepage:http://security.debian.org/
File Size:6709
Related CVE(s):CAN-2005-1269, CAN-2005-1934
Last Modified:Jul 7 10:10:03 2005
MD5 Checksum:f5a1b2abee269329d097c6ecc8fe5812

 ///  File Name: dsa-735-1.txt
Description:
Debian Security Advisory DSA 735-1 - A local user who has been granted permission to run commands via sudo could run arbitrary commands as a privileged user due to a flaw in sudo's pathname validation.
Homepage:http://security.debian.org/
File Size:7445
Related CVE(s):CAN-2005-1993
Last Modified:Jul 2 01:39:45 2005
MD5 Checksum:40c269e712729e8348fdeecc605f78da

 ///  File Name: dsa-736-1.txt
Description:
Debian Security Advisory DSA 736-1 - A vulnerability was recently found in the way that SpamAssassin parses certain email headers. This vulnerability could cause SpamAssassin to consume a large number of CPU cycles when processing messages containing these headers, leading to a potential denial of service (DOS) attack.
Homepage:http://security.debian.org/
File Size:4932
Related CVE(s):CAN-2005-1266
Last Modified:Jul 2 01:42:30 2005
MD5 Checksum:8d0feb6a44fffa1a898ae7d87d11b2b7

 ///  File Name: dsa-736-2.txt
Description:
Debian Security Advisory DSA 736-2 - A vulnerability was recently found in the way that SpamAssassin parses certain email headers. This vulnerability could cause SpamAssassin to consume a large number of CPU cycles when processing messages containing these headers, leading to a potential denial of service (DOS) attack.
Homepage:http://security.debian.org/
File Size:3374
Related CVE(s):CAN-2005-1266
Last Modified:Jul 8 09:18:45 2005
MD5 Checksum:c088aefc2a3fb58e65d0d3de875fb96a

 ///  File Name: dsa-738-1.txt
Description:
Debian Security Advisory DSA 738-1 - A vulnerability was discovered in the way that Razor parses certain email headers that could potentially be used to crash the Razor program, causing a denial of service (DOS).
Homepage:http://security.debian.org/
File Size:4792
Related CVE(s):CAN-2005-2024
Last Modified:Jul 7 10:49:02 2005
MD5 Checksum:4b19c8e56ce81b9aa9776ed943ceb2d7

 ///  File Name: dsa-742-1.txt
Description:
Debian Security Advisory DSA 742-1 - Derek Price, the current maintainer of CVS, discovered a buffer overflow in the CVS server, that serves the popular Concurrent Versions System, which could lead to the execution of arbitrary code.
Homepage:http://security.debian.org/
File Size:4960
Related CVE(s):CAN-2005-0753
Last Modified:Jul 8 09:13:04 2005
MD5 Checksum:c224f40db8c0bddcab742160a0d4552e

 ///  File Name: dsa-743-1.txt
Description:
Debian Security Advisory DSA 743-1 - Several problems have been discovered in ht, a viewer, editor and analyzer for various executables, that may lead to the execution of arbitrary code.
Homepage:http://security.debian.org/
File Size:7376
Related CVE(s):CAN-2005-1545, CAN-2005-1546
Last Modified:Jul 9 09:25:56 2005
MD5 Checksum:d8a73e45ca5b2bd5c7c38bcbc5a5cea1

 ///  File Name: dsa-744-1.txt
Description:
Debian Security Advisory DSA 744-1 - Sven Tantau discovered a security problem in fuse, a filesystem in userspace, that can be exploited by malicious, local users to disclose potentially sensitive information.
Homepage:http://security.debian.org/
File Size:8422
Related CVE(s):CAN-2005-1858
Last Modified:Jul 9 09:26:43 2005
MD5 Checksum:ebb9b7f09130299ff403b5b8d60bbb86

 ///  File Name: dsa-746-1.txt
Description:
Debian Security Advisory DSA 746-1 - A vulnerability had been identified in the xmlrpc library included with phpgroupware, a web-based application including email, calendar and other groupware functionality. This vulnerability could lead to the execution of arbitrary commands on the server running phpgroupware.
Homepage:http://security.debian.org/
File Size:11645
Related CVE(s):CAN-2005-1921
Last Modified:Jul 14 08:00:09 2005
MD5 Checksum:486e90d73b6508b1ae7c02ab8206bea4

 ///  File Name: dsa-747-1.txt
Description:
Debian Security Advisory DSA 747-1 - A vulnerability has been identified in the xmlrpc library included in the egroupware package. This vulnerability could lead to the execution of arbitrary commands on the server running egroupware.
Homepage:http://security.debian.org/
File Size:8939
Related CVE(s):CAN-2005-1921
Last Modified:Jul 12 16:24:35 2005
MD5 Checksum:85768ac6ec95c8af06b2472bdbe11af3

 ///  File Name: dsa-748-1.txt
Description:
Debian Security Advisory DSA 748-1 - A vulnerability has been discovered in ruby 1.8 that could allow arbitrary command execution on a server running the ruby xmlrpc server.
Homepage:http://security.debian.org/
File Size:20254
Related CVE(s):CAN-2005-1992
Last Modified:Jul 12 16:42:20 2005
MD5 Checksum:e1081c0b95a9b1effe8db20462deab33

 ///  File Name: dsa-749-1.txt
Description:
Debian Security Advisory DSA 749-1 - A vulnerability was discovered in the ettercap package which could allow a remote attacker to execute arbitrary code on the system running ettercap.
Homepage:http://security.debian.org/
File Size:8774
Related CVE(s):CAN-2005-1796
Last Modified:Jul 12 16:25:41 2005
MD5 Checksum:53be4ecc5ed938cabb54a20542370b1c

 ///  File Name: dsa-750-1.txt
Description:
Debian Security Advisory DSA 750-1 - infamous42md discovered that dhcpcd, a DHCP client for automatically configuring IPv4 networking, can be tricked into reading past the end of the supplied DHCP buffer which could lead to the daemon crashing.
Homepage:http://security.debian.org/
File Size:4840
Related CVE(s):CAN-2005-1848
Last Modified:Jul 12 16:41:15 2005
MD5 Checksum:fbb4dff36357723cf9a29cc9795848e1

 ///  File Name: dsa-751-1.txt
Description:
Debian Security Advisory DSA 751-1 - The upstream developers have discovered a bug in the DNS lookup code of Squid, the popular WWW proxy cache. When the DNS client UDP port (assigned by the operating system at startup) is unfiltered and the network is not protected from IP spoofing, malicious users can spoof DNS lookups which could result in users being redirected to arbitrary web sites.
Homepage:http://security.debian.org/
File Size:8622
Related CVE(s):CAN-2005-1519
Last Modified:Jul 12 16:44:33 2005
MD5 Checksum:30fb3feb33beb089c0ef6065ada59b1a

 ///  File Name: dsa-754-1.txt
Description:
Debian Security Advisory DSA 754-1 - Eric Romang discovered that centericq, a text-mode multi-protocol instant messenger client, creates some temporary files with predictable filenames and is hence vulnerable to symlink attacks by local attackers.
Homepage:http://security.debian.org/
File Size:10471
Related CVE(s):CAN-2005-1914
Last Modified:Jul 14 07:53:37 2005
MD5 Checksum:c048fafa67e00ddeef37243ae95308eb