debian Archives - CVE Vulnerability

CVE-2008-3930

Sun, 26 Feb 2023 09:10:16 +0000

migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

The post CVE-2008-3930 appeared first on CVE Vulnerability.

CVE-2008-1901

Sun, 26 Feb 2023 09:09:15 +0000

aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file.

The post CVE-2008-1901 appeared first on CVE Vulnerability.

CVE-2008-1902

Sun, 26 Feb 2023 09:09:15 +0000

The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL.

The post CVE-2008-1902 appeared first on CVE Vulnerability.

CVE-2008-0302

Sun, 26 Feb 2023 09:08:28 +0000

Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory.

The post CVE-2008-0302 appeared first on CVE Vulnerability.

CVE-2020-3810

Sun, 26 Feb 2023 06:41:47 +0000

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

The post CVE-2020-3810 appeared first on CVE Vulnerability.

CVE-2020-27350

Sun, 26 Feb 2023 06:40:20 +0000

APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions prior to 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions prior to 2.1.10ubuntu0.1;

The post CVE-2020-27350 appeared first on CVE Vulnerability.

CVE-2020-27351

Sun, 26 Feb 2023 06:40:20 +0000

Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-170. This issue affects: python-apt 1.1.0~beta1 versions prior to 1.1.0~beta1ubuntu0.16.04.10; 1.6.5ubuntu0 versions prior to 1.6.5ubuntu0.4; 2.0.0ubuntu0 versions prior to 2.0.0ubuntu0.20.04.2; 2.1.3ubuntu1 versions prior to 2.1.3ubuntu1.1;

The post CVE-2020-27351 appeared first on CVE Vulnerability.

CVE-2019-7305

Sun, 26 Feb 2023 06:34:14 +0000

Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this can lead to data leakage, information disclosure and potentially remote code execution on the web server. This issue affects all versions of eXtplorer in Ubuntu and Debian

The post CVE-2019-7305 appeared first on CVE Vulnerability.

CVE-2021-46848

Thu, 23 Feb 2023 14:13:13 +0000

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

The post CVE-2021-46848 appeared first on CVE Vulnerability.

CVE-2021-46784

Thu, 23 Feb 2023 14:13:12 +0000

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

The post CVE-2021-46784 appeared first on CVE Vulnerability.