Mandrake Linux Security Advisory : openssl (MDKSA-2003:020)

In an upcoming paper, Brice Canvel EPFL, Alain Hiltgen UBS, Serge Vaudenay EPFL, and Martin Vuagnoux EPFL, Ilion describe and demonstrate a timing-based attack on CBC ciphersuites in SSL and TLS. New versions of openssl have been released in response to this vulnerability 0.9.6i and 0.9.7a. The...

Mandrake Linux Security Advisory : ypserv (MDKSA-2003:072)

A vulnerability was found in versions of ypserv prior to version 2.7. If a malicious client were to query ypserv via TCP and subsequently ignore the server's response, ypserv will block attempting to send the reply. The result is that ypserv will fail to respond to other client requests. ypserv 2...

Mandrake Linux Security Advisory : netpbm (MDKSA-2004:011-1)

A number of temporary file bugs have been found in versions of NetPBM. These could allow a local user the ability to overwrite or create files as a different user who happens to run one of the the vulnerable utilities. Update : The patch applied made some calls to the mktemp utility with an...

Mandrake Linux Security Advisory : slocate (MDKSA-2003:015)

A buffer overflow vulnerability was discovered in slocate by team USG. The overflow appears when slocate is used with the -c and -r parameters, using a 1024 or 10240 byte string. This has been corrected in slocate version 2.7. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandrake Linux Security Advisory : eroaster (MDKSA-2003:083)

A vulnerability was discovered in eroaster where it does not take any security precautions when creating a temporary file for the lockfile. This vulnerability could be exploited to overwrite arbitrary files with the privileges of the user running eroaster. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : webmin (MDKSA-2003:025)

A vulnerability was discovered in webmin by Cintia M. Imanishi, in the miniserv.pl program, which is the core server of webmin. This vulnerability allows an attacker to spoof a session ID by including special metacharacters in the BASE64 encoding string used during the authentication process. Thi...

Mandrake Linux Security Advisory : lftp (MDKSA-2003:116)

A buffer overflow vulnerability was discovered by Ulf Harnhammar in the lftp FTP client when connecting to a web server using HTTP or HTTPS and using the 'ls' or 'rels' command on specially prepared directory. This vulnerability exists in lftp versions 2.3.0 through 2.6.9 and is corrected upstrea...

SUSE-SA:2003:027: glibc

The remote host is missing the patch for the advisory SUSE-SA:2003:027 glibc. Another integer overflow was found in glibc' XDR code. This bug is equal %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2003:027 if !...

SUSE-SA:2003:038: openssh

The remote host is missing the patch for the advisory SUSE-SA:2003:038 openssh. The openssh package is the most widely used implementation of the secure shell protocol family ssh. It provides a set of network connectivity tools for remote shell login, designed to substitute the traditional...

Fedora Core 1 : kdepim-3.1.4-2 (2004-133)

The KDE team found a buffer overflow in the file information reader of VCF files. An attacker could construct a VCF file so that when it was opened by a victim it would execute arbitrary commands. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2003-0988 t...

Fedora Core 1 : iproute-2.4.7-13.2 (2004-115)

This update of the iproute package fixes a security problem found in netlink. See CVE-2003-0856. All users of the netlink application are very strongly advised to update to these latest packages. - Thu May 06 2004 Phil Knirsch 2.4.7-13.2 - Built security errata version for FC1. - Wed Apr 21 2004...

Fedora Core 1 : lftp (2003-034)

Ulf Harnhammar found a remotely-triggerable buffer overflow in lftp. An attacker could create a carefully crafted directory on a website such that, if a user connects to that directory using the lftp client and subsequently issues a 'ls' or 'rels' command, the attacker could execute arbitrary cod...

Fedora Core 1 : glibc-2.3.2-101.1 (2003-002)

Herbert Xu reported that various applications can accept spoofed messages sent on the kernel netlink interface by other users on the local machine. This could lead to a local denial of service attack. The glibc function getifaddrs uses netlink and could therefore be vulnerable to this issue. The...

Fedora Core 1 : httpd-2.0.48-1.2 (2003-004)

This update includes the latest stable release of Apache httpd 2.0, including a fix for the security issue CVE-2003-0542, a buffer overflow in the parsing of configuration files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora Core 1 : kernel-2.4.22-1.2140.nptl (2003-047)

Various RTC drivers had the potential to leak small amounts of kernel memory to userspace through IOCTL's. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2003-0984 to this issue. Note that Tenable Network Security has extracted the preceding description...

Fedora Core 1 : mc-4.6.0-8.4 (2004-058)

Sat Jan 31 2004 Jakub Jelinek 4.6.0-8.4 - fix previous patch - Fri Jan 30 2004 Jakub Jelinek 4.6.0-8.3 - update php.syntax file 112645 - fix crash with large syntax file 112644 - Fri Jan 23 2004 Jakub Jelinek 4.6.0-8.2 - update CVE-2003-1023 fix to still make vfs symlinks relative, but with...

CVE-2003-1048

CVE-2003-1048 describes a double-free vulnerability in Internet Explorer’s GIF handling via mshtml.dll. The flaw affects IE6 and related builds where processing GIFs could allow a remote attacker to crash the application or, in some scenarios, execute arbitrary code. Public advisories (MS04-025) ...

CVE-2003-1048

Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service application crash via a malformed GIF image...

Gattaca Server 2003 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10731/info Gattaca Server 2003 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issue by creating a malicious link to the...

Gattaca Server 2003 POP3 - Denial of Service

Gattaca Server 2003 POP3 - Denial of Service source: https://www.securityfocus.com/bid/10728/info It is reported that Gattaca Server 2003 contains multiple denial of service vulnerabilities. These vulnerabilities allow a remote attacker to crash the application, denying service to legitimate user...