GLSA-200501-14 : mpg123: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200501-14 mpg123: Buffer overflow mpg123 improperly parses frame headers in input streams. Impact : By inducing a user to play a malicious file, an attacker may be able to exploit a buffer overflow to execute arbitrary code with t...

GLSA-200501-11 : Dillo: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-11 Dillo: Format string vulnerability Gentoo Linux developer Tavis Ormandy found a format string bug in Dillo's handling of messages in aInterfacemsg. Impact : An attacker could craft a malicious web page which, when access...

GLSA-200501-22 : poppassd_pam: Unauthorized password changing

The remote host is affected by the vulnerability described in GLSA-200501-22 poppassdpam: Unauthorized password changing Gentoo Linux developer Marcus Hanwell discovered that poppassdpam did not check that the old password was valid before changing passwords. Our investigation revealed that...

GLSA-200501-45 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-45 Gallery: XSS vulnerability Rafel Ivgi has discovered a cross-site scripting vulnerability where the 'username' parameter is not properly sanitized in 'login.php'. Impact : By sending a carefully crafted URL, an attacker...

GLSA-200501-15 : UnRTF: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200501-15 UnRTF: Buffer overflow An unchecked strcat in unrtf may overflow the bounds of a static buffer. Impact : Using a specially crafted file, possibly delivered by e-mail or over the web, an attacker may execute arbitrary cod...

CVE-2004-1452

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts...

CVE-2004-1452

Tomcat on Gentoo Linux (before 5.0.27-r3) is vulnerable: the init scripts are owned by tomcat:tomcat but run as root, potentially allowing members of the tomcat group to run arbitrary commands as root by modifying the scripts. Affected package: Tomcat init/config scripts. Impact: local privilege ...

ncpfs < 2.2.6 (Gentoo / Linux) - Local Privilege Escalation

!/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo with ncpfs 2.2.5 If it worked for you send an email to [email protected] /str0ke echo 'head1 by super' echo -e '==============\n'...

ncpfs 2.2.6 (Gentoo Linux) - Local Privilege Escalation

ncpfs 2.2.6 Gentoo Linux - Local Privilege Escalation !/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo with ncpfs 2.2.5 If it worked for you send an email to [email protected] /str0ke...

[ GLSA 200501-22 ] poppassd_pam: Unauthorized password changing

Gentoo Linux Security Advisory GLSA 200501-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[Full-Disclosure] [gentoo-announce] [ GLSA 200501-11 ] Dillo: Format string vulnerability

Gentoo Linux Security Advisory GLSA 200501-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2004-1452

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts...

GLSA-200412-13 : Samba: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200412-13 Samba: Integer overflow Samba contains a bug when unmarshalling specific MS-RPC requests from clients. Impact : A remote attacker may be able to execute arbitrary code with the permissions of the user running Samba, whic...

[ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines

Gentoo Linux Security Advisory GLSA 200412-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200412-07 : file: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200412-07 file: Arbitrary code execution A possible stack overflow has been found in the ELF header parsing code of file. Impact : An attacker may be able to create a specially crafted ELF file which, when processed with file, may...

[Full-Disclosure] [ GLSA 200412-03 ] imlib: Buffer overflows in image decoding

Gentoo Linux Security Advisory GLSA 200412-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[Full-Disclosure] [ GLSA 200412-05 ] mirrorselect: Insecure temporary file creation

Gentoo Linux Security Advisory GLSA 200412-05:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

[Full-Disclosure] [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library

Gentoo Linux Security Advisory GLSA 200412-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 200411-31 ] ProZilla: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200411-31 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 200411-19 ] Pavuk: Multiple buffer overflows

Gentoo Linux Security Advisory GLSA 200411-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...