Max Vozeler

Name of the Vulnerable Software and Affected Versions: zabbix versions prior to 20061006 Description: The issue concerns multiple format string vulnerabilities that could allow attackers to cause a denial of service, potentially leading to an application crash, and possibly execute arbitrary code. This is achieved through format string specifiers in information that would be recorded in the system log using functions such as `zabbix log` or `zabbix syslog`. Recommendations: For versions prior to 20061006, update to a version released after 20061006 to resolve the issue. As a temporary workaround, consider restricting the use of `zabbix log` and `zabbix syslog` functions until a patch is available.

Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 20061006 Description: The issue is related to multiple buffer overflows that can cause a denial of service, potentially leading to application crashes, and may allow the execution of arbitrary code. This is achieved by sending long strings to the `zabbix log` and `zabbix syslog` functions. Recommendations: For versions prior to 20061006, update to a version released after 20061006 to resolve the issue. As a temporary workaround, consider restricting input to the `zabbix log` and `zabbix syslog` functions to prevent long strings from being processed.

The issue allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD PRELOAD to modify expected function calls in the setuid application. Additionally, multiple vulnerabilities in the scponly package can lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

The issue allows local users to bypass access restrictions and gain root privileges. It may lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation can be carried out locally.

The issue allows local users to gain privileges via command line arguments because lockmail in maildrop does not drop privileges before executing commands.

The issue arises from the improper use of the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files. This allows remote attackers to execute arbitrary commands via a malicious PostScript file.

The issue concerns the pstopnm function in netpbm, which fails to properly utilize the "-dSAFER" option when invoking Ghostscript for converting PostScript files into PBM, PGM, or PNM files. This oversight enables external attackers, with user assistance, to execute arbitrary commands.

The issue is related to a format string vulnerability in the movemail utility. This vulnerability allows remote malicious POP3 servers to execute arbitrary code via crafted packets.

The issue allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1. This leads to a zero byte memory allocation and a buffer overflow in the camel-lock-helper.

The issue affects the yardradius package in Debian GNU/Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. It can be exploited remotely. A buffer overflow in the `process menu` function allows remote attackers to execute arbitrary code.

The issue allows local users to gain privileges due to improper handling of privileges when executing a program specified in the `RSH` environment variable.