5493 matches found
Mandrake Linux Security Advisory : MySQL (MDKSA-2006:158)
MySQL before 4.1.13 allows local users to cause a denial of service persistent replication slave crash via a query with multiupdate and subselects. CVE-2006-4380 There is a bug in the MySQL-Max and MySQL init script where the script was not waiting for the mysqld daemon to fully stop. This impact...
CentOS 4 : ntp (CESA-2006:0393)
Updated ntp packages that fix several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a reference time source. The NTP daemon ntpd, when run with the...
CVE-2006-4232
Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access...
CVE-2006-4232
Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access...
RHEL 4 : ntp (RHSA-2006:0393)
Updated ntp packages that fix several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The Network Time Protocol NTP is used to synchronize a computer's time with a reference time source. The NTP daemon ntpd, when run with the...
globus -- Multiple tmpfile races
The Globus Alliance reports: The proxy generation tool grid-proxy-init creates the file, secures the file to provide access only to owner and writes proxy to the file. A race condition exists between the opening of the proxy credentials file, and making sure it is safe file to write to. The check...
Opsware Network Automation System weak permissions
/etc/init.d/mysqll init script contains MySQL 'root' account password in cleartext...
Low: Red Hat Security Advisory: openssh security update
Updated openssh packages that fix bugs in sshd are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files...
RHEL 4 : openssh (RHSA-2006:0044)
Updated openssh packages that fix bugs in sshd and add auditing of user logins are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This...
CVE-2005-0136
The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service crash via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761...
DEBIAN-CVE-2005-3118
Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run without a firewall after a reboot...
[SECURITY] [DSA 845-1] New mason packages fix missing init script
-------------------------------------------------------------------------- Debian Security Advisory DSA 845-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2005 http://www.debian.org/security/faq -...
CVE-2005-3118
CVE-2005-3118 concerns mason: Mason before 1.0.0 fails to install the init script after configuration, leaving the system without a firewall at boot. Debian’s DSA-845-1 notes this is a programming error and provides fixes across distributions (woody: 0.13.0.92-2woody1; sarge: 1.0.0-2.2; sid: 1.0....
CVE-2005-3118
Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run without a firewall after a reboot...
Low: Red Hat Security Advisory: gdb security update
An updated gdb package that fixes several bugs and minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GDB, the GNU debugger, allows debugging of programs written in C, C++, and other languages by executing them i...
security flaw
The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of service crash via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761...
linux/x86 examples of long-term payloads hide-wait-change 187 bytes+
No description provided by source. /---------------------------------------------------------------------------- Mystique Project: Examples of long-term payloads hide-wait-change code by [email protected] & [email protected] ----------------------------------------------------------------------------...
security flaw
The tsearch2 module in PostgreSQL 7.4 through 8.0.x declares the 1 dexinit, 2 snbeninit, 3 snbruinit, 4 spellinit, and 5 syninit functions as "internal" even when they do not take an internal argument, which allows attackers to cause a denial of service application crash and possibly have other...