Проблемы в нескольких утилитах из дистрибутива Mandrake

Переполнения буфера в xcdroast suidroot, gatos, xkobo, xbill, Gnome iagno,...

Linux news 30.05.00

Linux 2.4.0test1-ac4 Alan Cox выпустил четвертую модификацию ядра Linux 2.4.0test1. Подробнее: .kernel.org:/pub/linux/krernel/v2.4.0 Ошибка в PGP5.0 Найдена ошибка в комплекте программ PGP 5.0. Следует отметить, что эта ошибка работает только на утилитах, вызываемых из командной строки и только н...

CVE-2000-0358

ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program...

CVE-2000-0491

Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARDQUERY request...

CVE-2000-0358

CVE-2000-0358 affects ORBit and gnome-session in Red Hat Linux 6.1, where remote attackers can cause a crash in a program. The available descriptions consistently state vulnerability to crash without detailing exploit vectors, affected versions beyond Red Hat Linux 6.1, or concrete remediation st...

Удаленная дырка в gdm (Gnome)

Классическое переполнение буфера, позволяет получить привелегии root если gdm прослушивает порт UDP/177 по-умолчанию выключено в большинстве систем...

gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow (2)

gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow 2 // source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for ...

gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow (1)

gdm 1.0.x2.0.x BETA2.2.0 - XDMCP Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for ...

gdm 1.0.x/2.0.x BETA/2.2.0 - XDMCP Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for a remote attacker to execute arbitrary commands as...

gdm 1.0.x/2.0.x BETA/2.2.0 - XDMCP Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/1233/info A buffer overrun exists in the XDMCP handling code used in 'gdm', an xdm replacement, shipped as part of the GNOME desktop. By sending a maliciously crafted XDMCP message, it is possible for a remote attacker to execute arbitrary commands as...

Linux news 09.05.00

FOR ALL Поздравляю всех с Днем Победы ! Всего вам хорошего ... и давайте все-таки не забывать наших предков ... Kernel Traffic 66 Вышел очередной выпуск Linux Kernel Traffic, обзора обсуждаемых тем в списке разработчиков ядра. Подробнее: http://kt.linuxcare.com/kernel-traffic/kt2000050766print.ep...

Linux news 6.04.00

Обновлен список работ для 2.4 Alan обновил список работ, которые необходимо выполнить для ядра 2.4. Подробнее: http://www.linuxtoday.org/stories/19479.html Kernel Traffic 61 Вышел очередной Kernel Traffic, за номером 61. Подробнее: http://www.linuxtoday.com McAfee VirusScan for Linux...

PT-1999-1510 · Gnome · Gdm

Name of the Vulnerable Software and Affected Versions: gdm affected versions not specified Description: The issue allows an attacker to identify valid users on a system through error messages generated by gdm when the VerboseAuth setting is enabled. Recommendations: At the moment, there is no...

CVE-2000-0358

ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program...

CVE-1999-1347

Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm...

linux_GNOME_exploit.txt

Greetings, Virtually any program using the GNOME libraries is vulnerable to a buffer overflow attack. The attack comes in the form: /path/to/gnome/prog --enable-sound --espeaker=$80bytebuffer The following exploit should work against any GNOME program, though I tried it on the irony...

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow

Mandriva Linux Mandrake 6.0 Gnome Libs 1.0.8 - espeaker Local Buffer Overflow source: https://www.securityfocus.com/bid/663/info A buffer overflow vulnerabilityin GNOME's shared libraries handling of the 'espeaker' command line argument may allow local users to attack setuid binaries linked again...

Mandriva Linux Mandrake 6.0 / Gnome Libs 1.0.8 - 'espeaker' Local Buffer Overflow

source: https://www.securityfocus.com/bid/663/info A buffer overflow vulnerabilityin GNOME's shared libraries handling of the 'espeaker' command line argument may allow local users to attack setuid binaries linked against these libraries to obtain root access. Calling a program linked against GNO...

CVE-1999-1477

Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack...

GNOME's Eye Of Gnome incorrect file name handling

Advisory ID Internal CORE-2003-0304-03 Bugtraq ID: 7121 CVE Name: CAN-2003-0165 CERT: VU363001 Title: GNOME's Eye Of Gnome incorrect file name handling Class: Input validation error Remotely Exploitable: No Locally Exploitable: Yes Vendors contacted: Eye Of Gnome . CORE Notification: 2003-03-14...