Scientific Linux Security Update : busybox on SL4.x i386/x86_64

BusyBox did not use a salt when generating passwords. This made it easier for local users to guess passwords from a stolen password file. CVE-2006-1058 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc';...

Scientific Linux Security Update : mutt on SL5.x, SL4.x, SL3.x i386/x86_64

A flaw was found in the way Mutt used temporary files on NFS file systems. Due to an implementation issue in the NFS protocol, Mutt was not able to exclusively open a new file. A local attacker could conduct a time-dependent attack and possibly gain access to e-mail attachments opened by a victim...

Scientific Linux Security Update : openldap on SL3.x i386/x86_64

A flaw was found in the way OpenLDAP handled selfwrite access. Users with selfwrite access were able to modify the distinguished name of any user. Users with selfwrite access should only be able to modify their own distinguished name. CVE-2006-4600 A memory leak bug was found in OpenLDAP's...

Scientific Linux Security Update : ruby on SL5.x, SL4.x i386/x86_64

A flaw was discovered in the way Ruby's CGI module handles certain HTTP requests. If a remote attacker sends a specially crafted request, it is possible to cause the ruby CGI script to enter an infinite loop, possibly causing a denial of service. CVE-2006-6303 An SSL certificate validation flaw w...

Scientific Linux Security Update : shadow-utils on SL3.x i386/x86_64

A flaw was found in the useradd tool in shadow-utils. A new user's mailbox, when created, could have random permissions for a short period. This could allow a local attacker to read or modify the mailbox. CVE-2006-1174 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : mysql on SL5.x i386/x86_64

"MySQL did not require privileges such as 'SELECT' for the source table in a 'CREATE TABLE LIKE' statement. An authenticated user could obtain sensitive information, such as the table structure. CVE-2007-3781 A flaw was discovered in MySQL that allowed an authenticated user to gain update...

Scientific Linux Security Update : kernel on SL3.x i386/x86_64

There were no new features introduced by this update. The only changes that have been included address critical customer needs or security issues elaborated below. Key areas affected by fixes in this update include the networking subsystem, dcache handling, the ext2 and ext3 file systems, the USB...

Scientific Linux Security Update : sendmail on SL5.x i386/x86_64

The configuration of sendmail in Scientific Linux was found to not reject the 'localhost.localdomain' domain name for email messages that come from external hosts. This could allow remote attackers to disguise spoofed messages. CVE-2006-7176 A flaw was found in the way sendmail handled NUL...

Scientific Linux Security Update : gdm on SL4 i386/x86_64

Marcus Meissner discovered a race condition issue in the way Gdm modifies the permissions on the .ICEauthority file. A local attacker could exploit this flaw to gain privileges. Due to the nature of the flaw, however, a successful exploitation was unlikely. CVE-2006-1057 %NASLMINLEVEL 70300 C...

Scientific Linux Security Update : tomcat on SL5.x i386/x86_64

Some JSPs within the 'examples' web application did not escape user provided data. If the JSP examples were accessible, this flaw could allow a remote attacker to perform cross-site scripting attacks CVE-2007-2449. Note: it is recommended the 'examples' web application not be installed on a...

Scientific Linux Security Update : libpng on SL5.x, SL4.x, SL3.x i386/x86_64

A flaw was found in the handling of malformed images in libpng. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was manipulated. CVE-2007-2445 A flaw was found in the sPLT chunk handling code in...

Scientific Linux Security Update : bluez-utils on SL4.x i386/x86_64

A flaw was found in the Bluetooth HID daemon hidd. A remote attacker would have been able to inject keyboard and mouse events via a Bluetooth connection without any authorization. CVE-2006-6899 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : sendmail on SL4.x i386/x86_64

The configuration of Sendmail was found to not reject the 'localhost.localdomain' domain name for e-mail messages that came from external hosts. This could have allowed remote attackers to disguise spoofed messages CVE-2006-7176. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Scientific Linux Security Update : gcc on SL4 i386/x86_64

Jrgen Weigert discovered a directory traversal flaw in fastjar. An attacker could create a malicious JAR file which, if unpacked using fastjar, could write to any files the victim had write access to. CVE-2006-3619 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : freetype on SL3.x, SL4.x, SL5.x i386/x86_64

Tavis Ormandy of the Google Security Team discovered several integer overflow flaws in the FreeType 2 font engine. If a user loaded a carefully-crafted font file with an application linked against FreeType 2, it could cause the application to crash or, possibly, execute arbitrary code with the...

Scientific Linux Security Update : lynx on SL3.x, SL4.x, SL5.x i386/x86_64

An arbitrary command execution flaw was found in the Lynx 'lynxcgi:' URI handler. An attacker could create a web page redirecting to a malicious URL that could execute arbitrary code as the user running Lynx in the non-default 'Advanced' user mode. CVE-2008-4690 Note: In these updated lynx...

Scientific Linux Security Update : shadow-utils on SL4.x i386/x86_64

A flaw was found in the useradd tool in shadow-utils. A new user's mailbox, when created, could have random permissions for a short period. This could allow a local attacker to read or modify the mailbox. CVE-2006-1174 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

These new kernel packages contain fixes for the security issues described below : - a flaw in the ISDN CAPI subsystem that allowed a remote user to cause a denial of service or potential remote access. Exploitation would require the attacker to be able to send arbitrary frames over the ISDN netwo...

Scientific Linux Security Update : util-linux for SL4.x i386/x86_64

A flaw was found in the way the login process handled logins which did not require authentication. Certain processes which conduct their own authentication could allow a remote user to bypass intended access policies which would normally be enforced by the login process. CVE-2006-7108 %NASLMINLEV...

Scientific Linux Security Update : libtiff on SL3.x, SL4.x, SL5.x i386/x86_64

Multiple uses of uninitialized values were discovered in libtiff's Lempel-Ziv-Welch LZW compression algorithm decoder. An attacker could create a carefully crafted LZW-encoded TIFF file that would cause an application linked with libtiff to crash or, possibly, execute arbitrary code. CVE-2008-232...