(RHSA-2003:147) kernel security update

The Linux kernel handles the basic functions of the operating system. Two potential data corruption scenarios have been identified. These scenarios can occur under heavy, complex I/O loads. The first scenario only occurs while performing memory mapped file I/O, where the file is simultaneously...

CVE-2003-0246

The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports...

[SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 226-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 226-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2003 http://www.debian.org/security/faq -...

xpdf-i - integer overflow

iDEFENSE discovered an integer overflow in the pdftops filter from the xpdf and xpdf-i packages that can be exploited to gain the privileges of the target user. This can lead to gaining unauthorized access to the 'lp' user if the pdftops program is part of the print filter. For the current stable...

Sun i-Runbook 2.5.2 - Directory and File Content Disclosure

source: https://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the contents of a known resource. This is accomplished by submitting...

Sun i-Runbook 2.5.2 - Directory and File Content Disclosure

Sun i-Runbook 2.5.2 - Directory and File Content Disclosure source: https://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the...

CVE-2002-0572

CVE-2002-0572 affects BSD-based systems (notably FreeBSD 4.5 and earlier); the issue arises when a local user closes standard input/output/error (FDs 0–2) and a subsequent setuid-invoked I/O operation reuses those descriptors, allowing read/write access to restricted files. Connected records corr...

CVE-2001-1135

The CVE-2001-1135 issue affects ZyXEL Prestige 642R and 642R-I routers. According to the connected documents, these devices can be reconfigured if the internal user knows the password and there is evidence of default credentials being present (HTTP web interface). The OpenVAS/Nessus entries indic...

CVE-1999-1214

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID...

CVE-1999-1214

The CVE-1999-1214 issue affects the 4.4 BSD kernel’s asynchronous I/O facility. It does not validate credentials when setting the recipient of I/O notification, allowing a local user to trigger a signal to an arbitrary process ID via specific ioctl/fcntl calls, causing a denial of service. The do...

squirrelmail: squirrelspell plugin check_me.mod.php bug

In-Reply-To: [email protected] Squirrelspell v0.3.1 is know to be affected, vulnerability of other versions is unknown. The buggy code extraction: --------------------- // Define the command used to spellcheck the document. $sqspellcommand=$SQSPELLAPP...

Microsoft Windows NT 3/4.0 - CSRSS Memory Access Violation

// source: https://www.securityfocus.com/bid/3478/info CSRSS.EXE is the Windows NT Client Server Run-time Subsystem. It is responsible for console windows and the creation and deletion of threads. The Windows NT kernel is dependant on this service and will halt if the service stops for any reason...

Microsoft Windows NT 34.0 - CSRSS Memory Access Violation

Microsoft Windows NT 34.0 - CSRSS Memory Access Violation // source: https://www.securityfocus.com/bid/3478/info CSRSS.EXE is the Windows NT Client Server Run-time Subsystem. It is responsible for console windows and the creation and deletion of threads. The Windows NT kernel is dependant on this...

CVE-2000-1007

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...

CVE-2000-1007

CVE-2000-1007 affects I-gear 3.5.7 and earlier; the issue stems from improper processing of log entries where a URL exceeds 255 characters, which can cause reporting errors. The available references describe the vulnerability as a processing flaw in log handling, with no explicit exploitation det...

CVE-2000-1007

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...

Небольшая дырка в I-Gear

Слишком длинные записи в log-Файлах приводят к невозможности просмотреть журнал...

I-gear 3.5.x for Microsoft Proxy logging vulnerability + temporary fix.

Hello everyone, this message is generated after several hours with Symantec Tech support and my personal research of the issue. The issue is confirmed to be a problem by Symantec® . Platform: I-gear 3.5.6 and 3.5.7-x for MSP Proxy 2.0 ; Windows NT 4.0 SP6; MSP 2.0 SP1; PowerEdge 2300 dual 450; 51...

CVE-2000-0376

CVE-2000-0376 affects i-drive Filo: when the setup installs an HTTP proxy server, an attacker can send an overly long HTTP GET request, overflowing a heap buffer and enabling remote code execution. Affected: Filo 1.0.0.1 for Windows NT (SP5). Mitigation: upgrade to Filo 1.5.3. The vulnerability i...