RHEL 4 : util-linux and mount (RHSA-2005:782)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:782 advisory. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The mount...

losetup, mount, util security update

CentOS Errata and Security Advisory CESA-2005:782-01 Updated util-linux and mount packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains a large variety of...

losetup, mount, util security update

CentOS Errata and Security Advisory CESA-2005:782 Updated util-linux and mount packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains a large variety of low-level...

Moderate: Red Hat Security Advisory: util-linux and mount security update

Updated util-linux and mount packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux...

security flaw

crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235...

CVE-2001-1573

CVE-2001-1573 describes a buffer overflow in smtpscan.dll used by Trend Micro InterScan VirusWall 3.51 for Windows NT. The root cause is an overflow triggered by a certain configuration parameter, allowing remote attackers to execute arbitrary code. Documents consistently cite the affected compon...

CVE-2001-1574

CVE-2001-1574 affects Trend Micro InterScan VirusWall 3.5.1 and involves a buffer overflow in two components, HttpSaveCVP.dll and HttpSaveCSP.dll. The flaw can allow remote attackers to execute arbitrary code. The available documents identify the vulnerable files and the impact but do not provide...

CVE-2001-1575

CVE-2001-1575 affects Apple Personal Web Sharing (PWS) versions 1.1, 1.5, and 1.5.5. When Web Sharing authentication is enabled, a remote attacker can cause a Denial of Service by sending a long password, possibly due to a buffer overflow. The connected documents confirm the affected product/vers...

CVE-2001-1576

CVE-2001-1576: Buffer overflow in cron on Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument. The connected documents confirm cron as the affected component and the root cause is a buffer overflow; no explicit exploit details or fixes are provided in the s...

CVE-2001-1577

CVE-2001-1577 : Unknown vulnerability in the CDE component of Caldera OpenUnix 7.1.0, 7.1.1, and 8.0. An xterm session can gain privileges when the session is reused. The description notes no publicly provided exploit details or remediation in the available documents. No explicit root cause, affe...

CVE-2001-1578

CVE-2001-1578 affects SCO OpenServer 5.0.6 and earlier. The vulnerability allows a local attacker to modify critical information, including certain CPU registers and segment descriptors. The available documents do not specify a patch or remediation; no exploit details are provided. Implementation...

CVE-2001-1579

The CVE-2001-1579 entry concerns the timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0. The root cause is improper termination of certain strings with a null character, which permits remote attackers to trigger a denial of service. The Red Hat CVE page corroborates the same description. P...

CVE-2001-1580

CVE-2001-1580 : A directory traversal vulnerability exists in ScriptEase viewcode.jse for NetWare 5.1 before 5.1 SP3, enabling remote attackers to read arbitrary files via ".." sequences in the query string. The vulnerability stems from insufficient input sanitization in the NetWare Web Server’s ...

CVE-2002-2001

The CVE relates to jmcce 1.3.8 on Mandrake 8.1. It creates log files in /tmp with predictable names, enabling a local user to perform a symlink attack to overwrite arbitrary files. Root-level risk is implied by Mandrake advisory context (jmcce runs with elevated privileges and writes logs to a wo...

CVE-2001-1507

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2001-1508

CVE-2001-1508 : A buffer overflow in the lpstat utility on SCO OpenServer 5.0–5.0.6a allows local users to run arbitrary code as group bin through a long command line argument. The documents specify a local exploit path but do not provide explicit exploited details or patch information. The vulne...

CVE-2001-1509

The CVE-2001-1509 entry concerns HP-UX 11.20 on Itanium (IA) systems. The vulnerability arises in geteuid failing to correctly identify a user’s effective UID, which could allow local users to escalate privileges. Affected context: Itanium Architecture (IA) running HP-UX 11.20. Documented impact:...

CVE-2001-1510

The CVE-2001-1510 entry concerns Allaire JRun versions 2.3.3, 3.0 and 3.1 running on IIS 4.0/5.0, iPlanet, Apache, JRun Web Server (JWS) and possibly other web servers. Affected component: the web server handling of certain crafted URLs, where appending one of three fragments ("%3f.jsp", "?.jsp",...

CVE-2001-1511

The CVE-2001-1511 issue affects JRun 3.0/3.1 running on JRun Web Server (JWS) and IIS, where remote attackers can read arbitrary JSP source code by requesting a URL containing a source filename ending in jsp%00 or js%2570. This indicates a file-disclosure vulnerability enabling access to server-s...

CVE-2001-1513

CVE-2001-1513 affects Macromedia JRun 3.0 and 3.1. The issue allows remote attackers to obtain duplicate active user session IDs and perform actions as other users by crafting a URL request for the web application directory without the trailing '/'. This implies potential session impersonation wi...