Mandriva Linux Security Advisory 2009-254 - Stack-based buffer overflow in the push_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, allows user-assisted remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a DOT file with a large number of Agraph_t elements. This update provides a fix for this vulnerability.
7f2db158447935245c33555b239cfb29888e91fb4043209ca52fda234e40774eMandriva Linux Security Advisory 2009-253 - CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then initiating a backup or restore. This update provides a fix for this vulnerability.
a7a4be7bdd9c764e83592e66bf41bac8f96657d7037366d2be25bf868040d2feCerberus FTP version 3.0.6 suffers from a remote denial of service vulnerability.
ff4740488f314e311cf5ca7ee1ecf511fcf6838ffab91a647ba69d5bad0a7cf7Novell Edirectory version 8.8 SP5 suffers from a cross site scripting vulnerability.
f94a3861133ed53cd369260714b12ab34c2f5bfe2161656e004ec00c5fdd05cd
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed