Linux news 27.11.00

Alan Cox: Linux kernel 2.4.0test11ac4 Список фиксов довольно внушительный. Интересно, они изменения эти в релиз 2.4.0 войдут? Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-25-001-04-NW-KN fetchmail 5.6.0 Вышла новая версия fetchmail - fetchmail 5.6.0. В данной версии обновлен FAQ и...

Linux news 15.11.00

Linux Kernel pre-patch 2.4.0 test11-pre5 Пятый пререлиз одинадцатого тестового ядра Linux за номером 2.4. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Вышел Kernel Traffic 93 Вышел 93 номер Kernel Traffic. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-13-003-06-OS-KN Опро...

CVE-2000-0864

Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...

Linux news 1.11.00

Linux 2.2.18pre18 Alan Cox выпустил очередную pre-версию следующего стабильного ядра Linux: Linux 2.2.18pre18. Подробнее: http://linuxtoday.com/newsstory..php3?ltsn=2000-10-29-007-04-NW-KN Linux-2.4.0-test10-final Возможно последнее ядро в 2.4.0-test серии. Для релиза 2.4.0-stable ожидается...

CVE-2000-0724

The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files...

CVE-2000-0723

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config...

CVE-2000-0722

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages...

CVE-2000-0792

Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...

CVE-2000-0792

Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...

CVE-2000-0792

CVE-2000-0792 affects GNOME Lokkit firewall package prior to 0.41, which does not properly restrict access to some ports even if no services are available. This is described in the NVD entry with a base CVSS score of 7.5 (Network, Low complexity, No auth) and partial impacts to confidentiality, i...

Linux news 27.09.00

Linux 2.2.18pre2aa2 Andrea Arcangeli выпустил следующую версию своей модификации ядра Linux для high-end серверов. Патч содержит поддержку до 4Gb памяти на платформе Intel, поддержку до 2Tb памяти на Alpha, улучшения VM для машин с большим объемом оперативки, Raw IO, улучшения SMP планировщика,...

CVE-2000-0724

The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files...

CVE-2000-0722

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages...

CVE-2000-0722

The CVE-2000-0722 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier. It describes a local-privilege issue where an attacker can cause the installation of arbitrary RPM packages by pre-creating the /tmp/helix-install directory before the package installation sequence begins...

CVE-2000-0723

The CVE-2000-0723 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier, where improper handling of /tmp leads to local users creating empty system configuration files (e.g., /etc/config.d/bashrc, /etc/config.d/csh.cshrc, /etc/rc.config). This vulnerability arises from inadequ...

CVE-2000-0723

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config...

CVE-2000-0724

CVE-2000-0724 involves the go-gnome Helix GNOME pre-installer. The vulnerability arises from a symlink attack in /tmp that lets local users overwrite arbitrary files, including uudecode, snarf, and some installer files. The described impact is complete confidentiality, integrity, and availability...

GNOME esound 0.2.19 - Unix Domain Socket Race Condition

GNOME esound 0.2.19 - Unix Domain Socket Race Condition source: https://www.securityfocus.com/bid/1659/info EsounD, part of the GNOME desktop environment, is a server process allowing several applications to share the same sound hardware. Versions of esound up to and including 0.2.19 create a...

GNOME esound 0.2.19 - Unix Domain Socket Race Condition

source: https://www.securityfocus.com/bid/1659/info EsounD, part of the GNOME desktop environment, is a server process allowing several applications to share the same sound hardware. Versions of esound up to and including 0.2.19 create a world-writable directory /tmp/.esd which is also used to...

Linux 2.2.17pre20 Вышла новая pre-версия следующего стабильного ядра Linux: 2.2.17pre20. Список изменений пока не попался мне на глаза. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan/2.2.17pre/ Linux-2.4.0-test7 Вышло новое "нестабильное" ядро Linux: Linux-2.4.0-test7. Подробнее:...