RHEL 2.1 : openssl (RHSA-2004:119)

Updated OpenSSL packages that fix a remote denial of service vulnerability are now available for Red Hat Enterprise Linux 2.1. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography...

RHEL 3 : XFree86 (RHSA-2004:061)

Updated XFree86 packages that fix a privilege escalation vulnerability are now available. Update 16 February 2004 Erratum filelist has been modified for x8664 and s390x only so that the correct multi-lib packages are available. XFree86 is an implementation of the X Window System, providing the co...

RHEL 3 : mutt (RHSA-2004:050)

New mutt packages that fix a remotely-triggerable crash in the menu drawing code are now available. Mutt is a text-mode mail user agent. A bug was found in the index menu code in versions of mutt. A remote attacker could send a carefully crafted mail message that can cause mutt to segfault and...

RHEL 3 : httpd (RHSA-2004:342)

Updated httpd packages that fix a buffer overflow in modssl and a remotely triggerable memory leak are now available. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. A stack-based buffer overflow was discovered in modssl that could be triggered if...

FreeBSD : Buffer overflow in Mutt 1.4 (122)

The following package needs to be updated: ja-mutt %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg67c052835d6211d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 / 3 : rsync (RHSA-2004:192)

An updated rsync package that fixes a directory traversal security flaw is now available. Rsync is a program for synchronizing files over a network. Rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot. This could allow a remote attacker to wri...

RHEL 2.1 / 3 : tcpdump (RHSA-2004:219)

Updated tcpdump, libpcap, and arpwatch packages fix vulnerabilities in ISAKMP parsing. Tcpdump is a command-line tool for monitoring network traffic. Tcpdump v3.8.1 and earlier versions contained multiple flaws in the packet display functions for the ISAKMP protocol. Upon receiving specially...

FreeBSD : SA-04:03.jail

The remote host is running a version of the FreeBSD kernel which contains a bug which may allow a jailed process to attach to another jail. An attacker compromised a jailed process on the remote host could exploit this flaw to switch to other jails on the system. C Tenable Network Security, Inc. ...

FreeBSD : Format string vulnerability in SSLtelnet (4aec9d58-ce7b-11d8-858d-000d610a3b12)

SSLtelnet contains a format string vulnerability that could allow remote code execution and privilege escalation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

FreeBSD : SA-04:01.mksnap_ff

The remote host is running a version of FreeBSD which contains a bug in the mksnapffs8 utility which may reset file flags on the remote file system, thus resetting the type of access control that were assigned to a file. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

FreeBSD : SA-04:12.jailroute

The remote host is running a version of the FreeBSD kernel which contains a bug which may allow a jailed process to modify the host routing tables of the whole system. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc"; ifdescription scriptid12555;...

RHEL 3 : openoffice.org (RHSA-2004:160)

Updated OpenOffice packages that fix a vulnerability in neon exploitable by a malicious DAV server are now available. OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. OpenOffice internally uses inbuilt code from neon, an HTTP and WebDAV client...

RHEL 3 : kernel (RHSA-2004:183)

Updated kernel packages that fix two privilege escalation vulnerabilities are now available. The Linux kernel handles the basic functions of the operating system. iSEC Security Research discovered a flaw in the ipsetsockopt function code of the Linux kernel versions 2.4.22 to 2.4.25 inclusive. Th...

CVE-2004-0611

Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service no new connections via a large number of open HTTP connections...

CVE-2004-0619

Integer overflow in the ubseckeysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service crash and possibly execute arbitrary code via a negative adddsabufbytes variable, which leads to a buffer overflow...

CVE-2004-0454

Buffer overflow in the msg function for rlpr daemon rlprd 2.04 allows local users to execute arbitrary code...

CVE-2004-0610

The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service connection refusal via a large number of open HTTP connections...

CVE-2004-0623

GNU GNATS 4.00 is affected by a format string vulnerability in misc.c that can allow a remote attacker to execute arbitrary code via format specifiers in a string logged by syslog. The CVE-2004-0623 entry notes a high severity (base score 10.0, CVSS2: AV:N/AC:L/Au:N/C:C/I:C/A:C) with remote, unau...

CVE-2004-0607

The CVE-2004-0607 issue affects KAME Racoon’s eay_check_x509cert function, which can verify certificates even when OpenSSL validation fails, potentially allowing remote attackers to bypass IKE authentication. Public documents (NVD, JVNDB, OpenVAS entries) confirm the vulnerability, but do not pro...

CVE-2004-0618

The provided records identify CVE-2004-0618 as a local-denial-of-service flaw in FreeBSD 5.1 for the Alpha processor. The vulnerability arises when a local user invokes execve with an unaligned memory address as an argument, causing a crash. No remediation or patch details are included in the sup...