CVE-2006-2655

The CVE-2006-2655 entry concerns FreeBSD ypserv (NIS server) in 5.x/6.x releases. The issue, caused by a build-process change, inadvertently disables access restrictions from the /var/yp/securenets mechanism (and relies on hosts.allow as a workaround), potentially allowing remote attackers to byp...

FreeBSD-SA-06:15.ypserv

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:15.ypserv Security Advisory The FreeBSD Project Topic: Inoperative access controls in ypserv8 Category: core Module: ypserv Announced: 2006-05-31 Credits: Hoka...

CVE-2004-2655

The CVE-2004-2655 issue affects XScreenSaver (xscreensaver) components used with rdesktop 1.3.1 and Fedora-era setups. The root cause is a keyboard focus flaw: XScreenSaver prompt for password did not reliably ensure keyboard focus, potentially leaking the user’s password to the focused program w...

Debian DSA-791-1 : maildrop - missing privilege release

Max Vozeler discovered that the lockmail program from maildrop, a simple mail delivery agent with filtering abilities, does not drop group privileges before executing commands given on the commandline, allowing an attacker to execute arbitrary commands with privileges of the group mail...

CVE-2005-2655

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments...

DEBIAN-CVE-2005-2655

lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments...

[SECURITY] [DSA 791-1] New maildrop packages fix arbitrary group mail command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 791-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2655

CVE-2005-2655 affects maildrop’s lockmail component; prior to version 1.5.3, it does not drop group privileges before executing commands, enabling local privilege escalation via command-line arguments. Debian’s DSA-791-1 fixes this by updating maildrop to 1.5.3-1.1sarge1 (stable) and 1.5.3-2 (sid...

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

CVE-2004-2655

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...