SMPFR

Code : Tout sélectionner

DSA-2054-1 bind9 -- DNS cache poisoning

Date Reported:
04 Jun 2010
Affected Packages:
bind9
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2010-0097, CVE-2010-0290, CVE-2010-0382.
More information:
Several cache-poisoning vulnerabilities have been discovered in BIND. These vulnerabilities apply only if DNSSEC validation is enabled and trust anchors have been installed, which is not the default.

The Common Vulnerabilities and Exposures project identifies the following problems:

Code : Tout sélectionner

Debian Security Advisory

DSA-2055-1 openoffice.org -- macro execution

Date Reported:
05 Jun 2010
Affected Packages:
openoffice.org
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2010-0395.
More information:
It was discovered that OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for Microsoft® Office, is not properly handling python macros embedded in an office document. This allows an attacker to perform user-assisted execution of arbitrary code in certain use cases of the python macro viewer component.

Code : Tout sélectionner

Debian Security Advisory

DSA-2056-1 zonecheck -- missing input sanitizing

Date Reported:
06 Jun 2010
Affected Packages:
zonecheck
Vulnerable:
Yes
Security database references:
In the Debian bugtracking system: Bug 583290.
In Mitre's CVE dictionary: CVE-2010-2052, CVE-2010-2155, CVE-2009-4882.
More information:
It was discovered that in zonecheck, a tool to check DNS configurations, the CGI does not perform sufficient sanitation of user input; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks.

Code : Tout sélectionner

Debian Security Advisory

DSA-2057-1 mysql-dfsg-5.0 -- several vulnerabilities

Date Reported:
07 Jun 2010
Affected Packages:
mysql-dfsg-5.0
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2010-1626, CVE-2010-1848, CVE-2010-1849, CVE-2010-1850.
More information:
Several vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems: