< Back to JetLib.com

jetlib.sec » Tags » source-packages

« Expand/Collapse

7 items tagged "source packages"

Related tags: source [+], ubuntu [+], source tarball [+], security [+], raphael geissert [+], paul wise [+], debdiff [+], william grant [+], vulnerability [+], usn [+], system [+], denial of service [+], mybb [+], horde [+], groupware [+], compromised [+]

February 17, 2012
0:00
Vuln: Horde Groupware Source Packages Backdoor Vulnerability
» ‎ SecurityFocus Vulnerabilities

Horde Groupware Source Packages Backdoor Vulnerability
Tags: groupware horde source source-packages vulnerability

February 15, 2012
14:45
Ubuntu Security Notice USN-1366-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1366-1 - Paul Wise discovered that debdiff did not properly sanitize its input when processing .dsc and .changes files. If debdiff processed a crafted file, an attacker could execute arbitrary code with the privileges of the user invoking the program. Raphael Geissert discovered that debdiff did not properly sanitize its input when processing source packages. If debdiff processed an original source tarball, with crafted filenames in the top-level directory, an attacker could execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: ubuntu security debdiff paul-wise raphael-geissert source-tarball source-packages

14:45
Ubuntu Security Notice USN-1366-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1366-1 - Paul Wise discovered that debdiff did not properly sanitize its input when processing .dsc and .changes files. If debdiff processed a crafted file, an attacker could execute arbitrary code with the privileges of the user invoking the program. Raphael Geissert discovered that debdiff did not properly sanitize its input when processing source packages. If debdiff processed an original source tarball, with crafted filenames in the top-level directory, an attacker could execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: ubuntu security debdiff paul-wise raphael-geissert source-tarball source-packages

14:45
Ubuntu Security Notice USN-1366-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1366-1 - Paul Wise discovered that debdiff did not properly sanitize its input when processing .dsc and .changes files. If debdiff processed a crafted file, an attacker could execute arbitrary code with the privileges of the user invoking the program. Raphael Geissert discovered that debdiff did not properly sanitize its input when processing source packages. If debdiff processed an original source tarball, with crafted filenames in the top-level directory, an attacker could execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: ubuntu security debdiff paul-wise raphael-geissert source-tarball source-packages

October 10, 2011
0:00
Vuln: MyBB Compromised Source Packages Backdoor Vulnerability
» ‎ SecurityFocus Vulnerabilities

MyBB Compromised Source Packages Backdoor Vulnerability
Tags: mybb compromised source source-packages vulnerability

March 11, 2010
9:01
USN-909-1.txt
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 909-1 - William Grant discovered that dpkg-source did not safely apply diffs when unpacking source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system.
Tags: source system usn william-grant denial-of-service source-packages

9:00
USN-909-1.txt
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 909-1 - William Grant discovered that dpkg-source did not safely apply diffs when unpacking source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system.
Tags: source system usn william-grant denial-of-service source-packages