Moderate: pam security and bug fix update

cdrtools-2.01.0.a32-0.EL3.6 2.01.0.a32-0.EL3.6 - fix for CVE-2004-0813 - cdrecord and readcd are now suid, but with a pamconsole check - Resolves: rhbz232096 2.01.0.a32-0.EL3.3 - fix for CAN-2005-0866 "cdrecord insecure temporary file" 2.01.0.a32-0.EL3.2 - added patch for CAN-2004-0806, if s.o. w...

CentOS 3 : pam (CESA-2007:0465)

Updated pam packages that resolves several bugs and security flaws are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system whereby administrators ca...

RHEL 3 : pam (RHSA-2007:0465)

Updated pam packages that resolves several bugs and security flaws are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system whereby administrators ca...

CVE-2007-0813

Technical details about CVE-2007-0813 are not publicly available in the provided documents; vectors, affected product/version, and fixes are not specified. Monitor for updates.

CVE-2006-0813

CVE-2006-0813 describes a heap-based buffer overflow in WinACE 2.60 triggered by a large ARJ header block. The underlying issue is a boundary/heap buffer handling error when reading an oversized ARJ header, allowing a user-assisted attacker to execute arbitrary code when a malicious ARJ archive i...

Secunia Research: WinACE ARJ Archive Handling Buffer Overflow

====================================================================== Secunia Research 23/02/2006 - WinACE ARJ Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2005-0813

The CVE-2005-0813 entry describes a buffer overflow in the Initial Redirect (ir) Squid Proxy Plug-In versions 0.1 and 0.2. The underlying flaw is a buffer overflow in the plug-in, with potential impacts including denial of service and arbitrary code execution. The description notes that exploitat...

CVE-2004-0813

CVE-2004-0813 is an in-the-wild/vendored vulnerability affecting SG_IO handling in pam_console within Linux PAM on service consoles. It allowed console users with access to certain device files to bypass read-only restrictions and perform unauthorized writes/erases on CD drives. Public advisories...

CVE-2003-0813

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service crash or reboot by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a...

CVE-2003-0813

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service crash or reboot by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a...

CVE-2003-0813

Technical details for CVE-2003-0813 are not publicly provided in the supplied documents; no concrete affected products/versions or fixes are listed. Monitor for updates.

CVE-2002-0813

CVE-2002-0813 corresponds to a heap-based buffer overflow in the TFTP server capability of Cisco IOS 11.1/11.2/11.3. The vulnerability can be triggered by a long TFTP read filename, allowing remote attackers to cause a denial of service (reset) or modify configuration. OpenVAS/Nessus entries desc...

CVE-2000-0813

Technical details about CVE-2000-0813 are not publicly provided in the connected documents you supplied. The materials do not specify affected products/versions beyond Check Point VPN-1/FireWall-1 4.1 and earlier, nor concrete remediation steps. Monitor for updates.

CVE-1999-0813

Cfingerd (with ALLOW_EXECUTION enabled) is vulnerable: it does not properly drop privileges when executing a program on behalf of a user, allowing local users to gain root privileges. Affected component: Cfingerd; underlying cause is improper privilege handling during exec. Exploitation details a...