CVE-2006-4124

The CVE-2006-4124 issue affects the libXm library in LessTif

CVE-2006-4124

The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUGFILE environment variable, which is used to create world-writable files when libXm is run from a setuid program...

[UNIX] Liblesstif Local Root (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-92-1)

Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...

Ubuntu 4.10 : lesstif1-1 vulnerabilities (USN-83-1)

Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...

Ubuntu 4.10 : libxpm4 vulnerability (USN-27-1)

Chris Evans discovered several stack overflows in the versions of libXpm shipped by X.Org, XFree86, and LessTif. These overflows were fixed in the Warty development tree before its release. Mathieu Herrb of OpenBSD subsequently discovered that the original patch was insufficient to address these...

GTK+, imlib, lessTif and libXPM libraries XPM files integer overflows

Integer overflow leads to heap based and stack based buffer overflow...

Fedora Core 3 : lesstif-0.93.36-6.FC3.2 (2005-815)

Fri May 6 2005 Thomas Woerner 0.93-36-6.FC3.2 - fixed possible libXpm overflows 151640 - allow to write XPM files with absolute path names again 140815 - Fri Nov 26 2004 Thomas Woerner 0.93.36-6.FC3.1 - fixed CVE-2004-0687 integer overflows and CVE-2004-0688 stack overflows in embedded Xpm...

USN-83-2: LessTif 1 vulnerabilities

USN-83-1 fixed some vulnerabilities in the "lesstif2" library. The older "lesstif1" library was also affected, however, a fix was not yet available at that time. This USN fixes the flaws for lesstif1. Please note that there are no supported applications that use this library, so this only affects...

RHEL 2.1 : lesstif (RHSA-2005:473)

Updated lesstif packages that fix flaws in the Xpm library are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having Moderate security impact by the Red Hat Security Response Team. LessTif provides libraries which implement the Motif industry standard graphical user...

lesstif security update

CentOS Errata and Security Advisory CESA-2005:473-01 Updated lesstif packages that fix flaws in the Xpm library are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having Moderate security impact by the Red Hat Security Response Team. LessTif provides libraries which...

Moderate: Red Hat Security Advisory: lesstif security update

Updated lesstif packages that fix flaws in the Xpm library are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having Moderate security impact by the Red Hat Security Response Team. LessTif provides libraries which implement the Motif industry standard graphical user...

USN-92-1: LessTif vulnerabilities

Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...

GLSA-200503-08 : OpenMotif, LessTif: New libXpm buffer overflows

The remote host is affected by the vulnerability described in GLSA-200503-08 OpenMotif, LessTif: New libXpm buffer overflows Chris Gilbert discovered potentially exploitable buffer overflow cases in libXpm that weren't fixed in previous libXpm security advisories. Impact : A carefully-crafted XPM...

OpenMotif, LessTif: New libXpm buffer overflows

Background LessTif is a clone of OSF/Motif, which is a standard user interface toolkit available on Unix and Linux. OpenMotif also provides a free version of the Motif toolkit for open source applications. Description Chris Gilbert discovered potentially exploitable buffer overflow cases in libXp...

USN-83-1: LessTif 2 vulnerabilities

Several vulnerabilities have been found in the XPM image decoding functions of the LessTif library. If an attacker tricked a user into loading a malicious XPM image with an application that uses LessTif, he could exploit this to execute arbitrary code in the context of the user opening the image...

[Full-Disclosure] [USN-83-1] LessTif 2 vulnerabilities

=========================================================== Ubuntu Security Notice USN-83-1 February 16, 2005 lesstif1-1 vulnerabilities CAN-2004-0914 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog The...

GLSA-200502-06 : LessTif: Multiple vulnerabilities in libXpm

The remote host is affected by the vulnerability described in GLSA-200502-06 LessTif: Multiple vulnerabilities in libXpm Multiple vulnerabilities, including buffer overflows, out of bounds memory access and directory traversals, have been discovered in libXpm, which is shipped as a part of the X...

LessTif: Multiple vulnerabilities in libXpm

Background LessTif is a clone of OSF/Motif, which is a standard user interface toolkit available on Unix and Linux. Description Multiple vulnerabilities, including buffer overflows, out of bounds memory access and directory traversals, have been discovered in libXpm, which is shipped as a part of...

RHEL 2.1 : lesstif (RHSA-2005:004)

An updated lesstif package that fixes flaws in the Xpm library is now available for Red Hat Enterprise Linux 2.1. LessTif provides libraries which implement the Motif industry standard graphical user interface. During a source code audit, Chris Evans discovered several stack overflow flaws and an...