-
Secunia Advisory 16319
Karrigell Python Namespace Exposure Vulnerability- Criticality: High
- Description: Radovan Garabik has reported a vulnerability in Karrigell, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.
The vulnerability is caused to missing validation of user-supplied input and can be exploited to execute certain python built-in functions via a karrigell services (.ks) script. This can be exploited to call python built-in functions that consume large amounts of resources or to create files in the current working directory of the server.
- Secunia Advisory: http://secunia.com/advisories/16319/
-
Secunia Advisory 16326
Mandriva update for mozilla- Criticality: High
- Description: Mandriva has issued an update for mozilla. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and spoofing attacks, and compromise a user's system.
- Secunia Advisory: http://secunia.com/advisories/16326/
-
Secunia Advisory 16327
Debian apt-cacher Unspecified Arbitrary Command Execution- Criticality: High
- Description: Eduard Bloch has reported a vulnerability in apt-cacher, which potentially can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an unspecified input validation error in the caching system, which can be exploited to execute arbitrary commands.
- Secunia Advisory: http://secunia.com/advisories/16327/
