GLSA-200501-14 : mpg123: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200501-14 mpg123: Buffer overflow mpg123 improperly parses frame headers in input streams. Impact : By inducing a user to play a malicious file, an attacker may be able to exploit a buffer overflow to execute arbitrary code with t...

GLSA-200501-15 : UnRTF: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200501-15 UnRTF: Buffer overflow An unchecked strcat in unrtf may overflow the bounds of a static buffer. Impact : Using a specially crafted file, possibly delivered by e-mail or over the web, an attacker may execute arbitrary cod...

GLSA-200502-10 : pdftohtml: Vulnerabilities in included Xpdf

The remote host is affected by the vulnerability described in GLSA-200502-10 pdftohtml: Vulnerabilities in included Xpdf Xpdf is vulnerable to a buffer overflow, as described in GLSA 200501-28. Impact : An attacker could entice a user to convert a specially crafted PDF file, potentially resulting...

CVE-2004-1452

Tomcat on Gentoo Linux (before 5.0.27-r3) is vulnerable: the init scripts are owned by tomcat:tomcat but run as root, potentially allowing members of the tomcat group to run arbitrary commands as root by modifying the scripts. Affected package: Tomcat init/config scripts. Impact: local privilege ...

CVE-2004-1452

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts...

CVE-2004-1452: Undefined Security Weakness

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts...

ncpfs < 2.2.6 (Gentoo / Linux) - Local Privilege Escalation

!/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo with ncpfs 2.2.5 If it worked for you send an email to [email protected] /str0ke echo 'head1 by super' echo -e '==============\n'...

ncpfs 2.2.6 (Gentoo Linux) - Local Privilege Escalation

ncpfs 2.2.6 Gentoo Linux - Local Privilege Escalation !/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo with ncpfs 2.2.5 If it worked for you send an email to [email protected] /str0ke...

[ GLSA 200501-22 ] poppassd_pam: Unauthorized password changing

Gentoo Linux Security Advisory GLSA 200501-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[Full-Disclosure] [gentoo-announce] [ GLSA 200501-11 ] Dillo: Format string vulnerability

Gentoo Linux Security Advisory GLSA 200501-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2004-1452

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts...

GLSA-200412-13 : Samba: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200412-13 Samba: Integer overflow Samba contains a bug when unmarshalling specific MS-RPC requests from clients. Impact : A remote attacker may be able to execute arbitrary code with the permissions of the user running Samba, whic...

[ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines

Gentoo Linux Security Advisory GLSA 200412-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200412-07 : file: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200412-07 file: Arbitrary code execution A possible stack overflow has been found in the ELF header parsing code of file. Impact : An attacker may be able to create a specially crafted ELF file which, when processed with file, may...

[Full-Disclosure] [ GLSA 200412-03 ] imlib: Buffer overflows in image decoding

Gentoo Linux Security Advisory GLSA 200412-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[Full-Disclosure] [ GLSA 200412-05 ] mirrorselect: Insecure temporary file creation

Gentoo Linux Security Advisory GLSA 200412-05:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

[Full-Disclosure] [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library

Gentoo Linux Security Advisory GLSA 200412-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 200411-31 ] ProZilla: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200411-31 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 200411-19 ] Pavuk: Multiple buffer overflows

Gentoo Linux Security Advisory GLSA 200411-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200411-17 : mtink: Insecure tempfile handling

The remote host is affected by the vulnerability described in GLSA-200411-17 mtink: Insecure tempfile handling Tavis Ormandy from Gentoo Linux discovered that mtink uses insecure permissions on temporary files. Impact : A local attacker could create symbolic links in the temporary files directory...