sane-backends multiple bugs

Multiple DoS conditions...

Novell Netware Enterprise Web Server 5.1/6.0 - 'CGI2Perl.NLM' Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/8251/info Novell Netware Enterprise Web Server cgi2perl.nlm has been reported prone to a buffer overflow vulnerability. The issue presents itself, likely due to insufficient bounds checking performed on user-supplied data. It has been reported that a remo...

Important: Red Hat Security Advisory: : : : Updated OpenSSL packages fix vulnerabilities

Updated OpenSSL packages that fix potential timing-based and modified Bleichenbacher attacks are available for Red Hat Linux on IBM iSeries and pSeries systems. OpenSSL is a commercial-grade, full-featured, and open source toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer...

CVE-2002-1563

Summary: CVE-2002-1563 affects stunnel 4.0.3 and earlier and is due to unsafe handling of SIGCHLD in the child process/daemon path, allowing a race that can crash the process and cause a denial of service. The issue is documented across multiple feeds (NVD entry and OSV/CVE mirrors) with Red Hat ...

CVE-2002-1563

stunnel 4.0.3 and earlier allows attackers to cause a denial of service crash via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter...

CVE-2002-1563

stunnel 4.0.3 and earlier allows attackers to cause a denial of service crash via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter...

[SECURITY] [DSA 292-1] New mime-support packages fix temporary file race conditions

-------------------------------------------------------------------------- Debian Security Advisory DSA 292-1 [email protected] http://www.debian.org/security/ Martin Schulze April 22nd, 2003 http://www.debian.org/security/faq -...

CVE-2001-1349

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers...

linux kmod/ptrace bug - details

Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...

Multiple bugs in Samba

Buffer overflow on SMB/CIFS packet re-assembly, chown race conditions...

DSA-232 cupsys - several vulnerabilities

Bulletin has no description...

CVE-2002-1366

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

CVE-2002-1366

Common Unix Printing System CUPS 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream...

Privelege escalation in util-linux chfn

Unchecked race conditions under file decriptors leaves ability to modify /etc/passwd...

Microsoft SQL Server 2000 - sp_MScopyscript SQL Injection

Microsoft SQL Server 2000 - spMScopyscript SQL Injection source: https://www.securityfocus.com/bid/5309/info The Microsoft SQL Server 2000 spMScopyscript stored procedure does not sufficiently validate input before passing it to the xpcmdshell extended stored procedure. An attacker with the abili...

Acrobat reader 4.05 temporary files

------------------------------------------------------------ Insecure temporary files in Acrobat Reader 4.05 [email protected] $Date: 2002/06/20 07:21:29 $ ------------------------------------------------------------ Author: Jarno Huuskonen [email protected] Discovered: Wed 18 Jul 2001...

*ALERT* BID 3581: Wu-Ftpd File Globbing Heap Corruption Vulnerability

--------------------------------------------------------------------------- Security Alert Subject: Wu-Ftpd File Globbing Heap Corruption Vulnerability BUGTRAQ ID: 3581 CVE ID: CVE-MAP-NOMATCH Published: Nov 27, 2001 Updated: Nov 28, 2001 01:12:56 Remote: Yes Local: No Availability: Always...

Security Update: [CSSA-2001-031.0] Linux -security issues in ucd-snmp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera International, Inc. Security Advisory Subject: Linux - security issues in ucd-snmp Advisory number: CSSA-2001-031.0 Issue date: 2001, August 16 Cross reference: 1. Problem Description In a routine security audit of the ucd-snmp package we have...

Locally exploitable races in OpenBSD VFS

my apologies if it ends up submitted twice Let's start with the trivial: good old aliasing bugs. Example 1: dup2 vs. close. Relevant file: kern/kerndescrip.c sysdup2p, v, retval struct proc p; void v; registert retval; snip if uintold = fdp-fdnfiles || fdp-fdofilesold == NULL || uintnew =...

Unsafe Signal Handling in Sendmail

RAZOR advisory: Unsafe Signal Handling in Sendmail Issue Date: May 28, 2001 Contact: Michal Zalewski [email protected] Topic: Sendmail signal handlers used for dealing with specific signals are vulnerable to numerous race conditions. Affected Systems: Any systems running sendmail tested ...