Jenkins Security Advisory reports:
This advisory announces a security vulnerability that wΈ `» _? EΣ?‘ } _lls AcquireMagickMemory with an improper size argument3434105
54716 Ύΐ } ster from authenticated clients (high). Given a Puppet master with the "Delete" directive allowed in auth.conf for an authenticated host, an attacker on that host can send a specially crafted Delete request that can cause an arbitrary file deletioΔΰ t¦ N? BΦ?Έ } smessage that lacks UTF-8 encodingcvename>CVE-2012-117815
Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision Ρ ( & a ) y&php">
It was possible to manipulate the PHP session superglobal using
some of the Swekey authentication code. This could open a path
for other attackΧΐ K₯ Y
Π ₯ `d } Jnput
validation are insufficientwww.videolan.org/security/sa1102.htmlέΰ H
F ]λ: ] Fcovery>
Patch 20091015 fixes one buffer overflow problem in sgLog.c when overlong URLs are requested. SquidGuard will then go into emergency mode were no blocking occurs. This is not required in this situation.
πΐ 6 OΦ> } 4ng to a denial of servicbid>34656Lack of sanitization throughout Netrw can lead to arbitrary code execution upon opening a directory wiύ C BΓ A } AJoe Orton reports:
A NULL pointer deference in the Digest authentication support in neon versions 0.2 vά@ } -gtk
mplayer-gtk2 mplayer-gtk-esound mplayer-gtk2-esound 0.99.11_2The Mplayer teΐ } cious people to cause a DoS (Denial of Service). Certain errors within libpng, including a logical NOT instead of a bitwise NOT in pngtrtran.c, an error in the 16bit cheap transparency extension, and an incorrect use of sizeof() may bΰ & _΅ } $ service1320
CVE-2007-1321 CVE-2007-1322 CVE-2007-1323 CVE-2007- } tion> http://www.security-assessment.com/files/advisories/Asterisk_remote_heap_overflow.pdf http://marc.theaimsgroup.com/?l=bugtraq&m=116121567530170 } .w3.org/1999/xhtml">Horde 3.1.2 release announcement:
Security Fixes:
- Closed XSS problems in dereferrer (IE only), help viewer and proble’ΐ }
Problem Description
IPsec provides an anti-replay service which when enabled prevents an attacker from successfully executing a replay attack. This is done through the verification of sequence numbers. A programming error in the fast_i¨ΰ }
CVE-2005-1151 CVE-2005-1152 http://secunia.com/advisories/15475/ 2005-05-26 2005-11-07 2005-11-26