RubyGems did not validate the hostname returned in the SRV record
before sending requests to it. This left clients open to a DNS
hijack attack, whereby an attacker could return a SRV of their
choosing and get the client to use itfreebsdpr>ports/200264
Use after free vulnerability in unserialize() with DateTimeZone. Mitigation for CVE-2015-0235 -- GHOST: glibc gethostbyname buffer
overflow5-0235
Absolute path traversal vulnerability in GNU Wget before
1.16, when recursion is enabled, allows remote FTP servers
to write to ( v?" d &2-11e3-866e-b499baab0cbe">
This release includes a *security fix* to s Wf v? Q15 d U>
This advisory announces multiple security vulnerabilities that were found in Jenkins core.
iSECURITY-105
In some places, @ d: z d >ame>py26-django-devel
201309222,1Django project reports: These releases address a denial-of-service attack against Django's authentication framework. All users of Django are encouraged to upgrade imm {b `@ C d ynames from the output of 'svnlook changed' and passes them to a further shell command (equivalent to the 'system()' call of the C standard library) without escaping them. This could be used to run arbitrary shell commands in the context of the user whom the pre-commit script runs as (the user who owns the repository)0831 ˀ H d x^eKo0 ۧm(ФIlHNm[ U ~9Bc#IGm b5x `X;.P -FV1q 9䜴%%kqB%]CM-aJm>VPI@"yH]mYt9Yh)Vɽdܩy 抦g -`X ʗ2G$Mz 府zɔx`{+a&f l1@Id訞HeX$g&bf岀okn DzB U %7x XfX Ѡ O O
268267 2012-10-24 2012-11-12
John Barber reported a problem where, if the system
administrator misconfigures rssh by providing too few access
bits in the configuration file, the user wi V RuP v@e d Tes>
7 d x^}J@LLlm)6V,HHdI> bCqVgu %v \MFKJ`ԑЍ$Rpzi3Q6v𢏐?wQ qMY* Ԩ{I W$g'lx&I Ct d$hDi53 l-X:2Ai<6'챢E 8/n64MȠ@, {@+,<=Grl{P%I||۲$#S /(t~< )?!ʣ" YK K7 z@{ d Wc-b482fe3f522d">OpenTTD -- Buffer overflows in savegame loading1.0
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly (. vx d &ulnerabilities
rt36 3.6.11 rt38 3.8.10Best Practical reports: In the process of preparing the release of RT 4.0.0, we performed an extensive security audit of RT's source code. ( v> d &s/advisories/MITKRB5-SA-2010-007.txt
http://osvdb.org/69610 2010-11-30 2010-12-09
When multiple commands are queued (at the server) for execution in the next game tick and an client joins the server can get into an infinite loop. With the default settings triggering this bug is difficult (if not impossible), however n% \~) T; d lmore permissions (e. g. administrator permissions).
To use this vulnerability the malicious user needs to have a valid Agent- or Customer-session10-0438
http://otrs.org/advisory/OSA-2010-01-en/ 2010-02-08 2010-02-08cae01d7b-110d-11df-955a-00219b > `@ d http://secunia.com/advisories/35852/ http://www.kb.cert.org/vuls/id/466161 2009-07-15 2009-07-29
An erro fR 8? d d
sircd 0.4.0 A vulnerability in sircd can be exploited by a malicious person to compromise a vulnerable system. The vulnerability is caused by a boundary error in the code handling reverse DNS lookups, when a user connects to the service. If the FQDN (Fully Qua Y d x^u1o1 WZ!C[p=7[f/x2GX'$u})NFQO q*0HT Nv5cI};3&lٷ}rr62:L>C=>> 1Ki$va0J0,V6Q&<}6Pd!X[.8rfM^ \'?iLXB^pWWX0sbif g 3)[Stt13ץ[ ;8JmqDt!5y.9T4 abbO rRllJ%W0,a )L:Nɛb{3 ~|ȮW`Z O M x ;)Mcvename>
http://www.mozilla.org/security/announce/2006/mfsa2006-30.html 2006-05-02 2006-05-03 2006-05-05
This advisory covers a single cross-site scripting issue that has recently been discovered and fixed in the Bugzilla code: If a malicious user links to a Bugzil ( v@ d &>
rssh 2.2.2 scponly 4.0Jason Wies identified both rssh & scponly have a vulnerability that allows arbitrary command execution. He reports: The problem is compounded when you recognize that the B G@z jq D=D < U@Gael Delalleau discovered several integer overflows in Mozilla's BMP decoder that can result in denial-of-service or 9055067
TA04-261A 84720 ( v? d &rchive/message.php?mailbox=archive.info-cyrus&msg=19349 2002-12-02 2004-05-12 2004-06-27