Debian 2.1 - HTTPd

source: https://www.securityfocus.com/bid/318/info The Debian GNU/Linux 2.1 apache package by default allows anyone to view /usr/doc via the web, remotely. This is because srm.conf is preconfigured with the line: Alias /doc/ /usr/doc/ Boa is also preconfigured this way. lynx http://some.host/doc...

Subject: [SECURITY] New version of kernel-image for sparc fixes DoS attack

As is widely known by now the Linux 2.2.x kernels had a problem with parsing IP options, which made them susceptible to a DoS attack. The Debian GNU/Linux 2.1 release for the Sun sparc architecture uses such a kernel. If you are using such a system and havent upgraded the kernel yourself, we...

[SECURITY] New version if ipopd prevents exploit

We have received reports that the version of the imap suite in Debian GNU/Linux 2.1 has a vulnerability in its POP-2 daemon, which can be found in the ipopd package. Using this vulnerability it is possible for remote users to get a shell as user "nobody" on the server. We recommend you upgrade yo...

[SECURITY] New version of procmail with security fixes

A new version of procmail has been released which fixes some new buffer overflows that were missed in version 3.13 . We recommend you upgrade your procmail package immediately. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.1 alias slink...

[SECURITY] New version of lsof fixes buffer overflow

We have received reports that the lsof package is distributed in Debian GNU/Linux 2.0 contains a buffer overflow. Using this overflow it is possible for local users to gain root-access. We have fixed this problem in version 4.37-3. We recommend you upgrade your lsof package immediately. wget url...

Re: [SECURITY] New versions of super fixes two buffer overflows

Martin Schulze wrote: ==================================================================== Debian GNU/Linux Security February 15th, 1999 We have received reports about two buffer overflows in the super package which was distributed as part of Debian GNU/Linux. Firstly, for per-user .supertab file...

[SECURITY] New versions of super fixes two buffer overflows

==================================================================== Debian GNU/Linux Security February 15th, 1999 We have received reports about two buffer overflows in the super package which was distributed as part of Debian GNU/Linux. Firstly, for per-user .supertab files super didnt check fo...

[SECURITY] New versions of super fixes two buffer overflows

==================================================================== Debian GNU/Linux Security February 15th, 1999 We have received reports about two buffer overflows in the super package which was distributed as part of Debian GNU/Linux. Firstly, for per-user .supertab files super didnt check fo...

CVE-2000-0367

Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges...

Re: [SECURITY] New versions of super fixes two buffer overflows

Martin Schulze wrote: ==================================================================== Debian GNU/Linux Security February 15th, 1999 We have received reports about two buffer overflows in the super package which was distributed as part of Debian GNU/Linux. Firstly, for per-user .supertab file...

[SECURITY] New versions of super fixes two buffer overflows

==================================================================== Debian GNU/Linux Security February 15th, 1999 We have received reports about two buffer overflows in the super package which was distributed as part of Debian GNU/Linux. Firstly, for per-user .supertab files super didnt check fo...

CVE-1999-0374

Debian GNU/Linux cfengine package is susceptible to a symlink attack...

[SECURITY] New versions of cfengine fixes symlink attack

The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet. We recommend y...

[SECURITY] Corrected advisory on wu-ftpd-academ buffer overflow

The previous advisory concerning wu-ftpd-academ contained an error: the md5sum given for wu-ftpd-academ2.4.2.16-12.2i386.deb was incorrect. The correct md5sum is b851adb345917a6f92e8b03f8cc97ff2. I apologize for the confusion this has caused. The complete, updated, text of the advisory follows...

[SECURITY] New version of wu-ftpd fixes buffer overflow

Subject: SECURITY New versions of wu-ftpd-academ fixes buffer overflow We have received reports that the wu-ftpd-academ package as distributed in Debian GNU/Linux 2.0 is vulnerable to a buffer overflow. Using this vulnerability, known as palmetto, it is possible to gain shell access or otherwise...

[SECURITY] New versions of proftpd fixes buffer overflow

We have received reports that the proftpd package as distributed in Debian GNU/Linux 2.0 is vulnerable to a buffer overflow. Using this vulnerability, known as palmetto, it is possible to gain shell access or otherwise circumvent normal login access and logging mechanisms. This has been fixed in...

CVE-1999-0373

Buffer overflow in the "Super" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root...

CVE-1999-0678

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server...

Error Condition Re: [SECURITY] New versions of netstd fixes buffer overflows

[email protected]: You are not subscribed to [email protected]. Your message is returned to you unprocessed. If you want to subscribe, send mail to [email protected] with the following request: subscribe SG Your Name We have received reports that the netstd suffered from t...

[SECURITY] New versions of netstd fixes buffer overflows

We have received reports that the netstd suffered from two buffer overflows. The first problem is an exploitable buffer overflow in the bootp server. The second problem is an overflow in the FTP client. Both problems are fixed in a new netstd package, version 3.07-2hamm.4 . We recommend you upgra...