Debian mason postinst Firewall Startup Failure

Network Security News – Thursday, October 13, 2005 Events

Debian mason postinst Firewall Startup Failure

mason contains a flaw that may leave a system without a firewall after a reboot. The issue is triggered when a user configures mason after the installation, resulting in a loss of integrity.. Read more at osvdb.org/19875

Microsoft DirectX DirectShow QUARTZ.DLL AVI Processing Overflow

A remote overflow exists in Microsoft DirectX. The 'QUARTZ.DLL' library fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted AVI movie file, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.. Read more at osvdb.org/18822

GXT Editor File Processing Local Overflow

A local overflow exists in GTX Editor. The application fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted file containing an overly long string, a malicious user can cause arbitrary code execution resulting in a loss of integrity.. Read more at osvdb.org/18561

Microsoft Collaboration Data Objects Remote Overflow

A remote overflow exists in Microsoft Collaboration Data Objects (CDO). The component fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted email message containing an overly long header line, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.. Read more at osvdb.org/19905

oftpd USER Command Remote Overflow

A remote overflow exists in oftpd. The application fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request to the 'USER' command, a remote attacker can cause the daemon to crash resulting in a loss of availability.. Read more at osvdb.org/17865

Winamp MP3 ID3v2 Tag Handling Overflow

A remote overflow exists in Winamp. The application fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted mp3 file containing an overly long ID3v2 tag, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.. Read more at osvdb.org/17897