iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 08.28.2002 Linuxconf locally exploitable buffer overflow vulnerability DESCRIPTION A vulnerability exists in linuxconf which if the LINUXCONFLANG environment variable processes at least 964 bytes of data, a buffer overflow...

Linuxconf 1.1.x1.2.x - Local Environment Variable Buffer Overflow (3)

Linuxconf 1.1.x1.2.x - Local Environment Variable Buffer Overflow 3 source: https://www.securityfocus.com/bid/5585/info Linuxconf is a Linux configuration utility from Solucorp. It is typically installed as a setuid root utility for the management and configuration of Linux operating systems. A...

Linuxconf 1.1.x/1.2.x - Local Environment Variable Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/5585/info Linuxconf is a Linux configuration utility from Solucorp. It is typically installed as a setuid root utility for the management and configuration of Linux operating systems. A buffer overflow vulnerability has been reported for Linuxconf. The...

Linuxconf 1.1.x1.2.x - Local Environment Variable Buffer Overflow (1)

Linuxconf 1.1.x1.2.x - Local Environment Variable Buffer Overflow 1 // source: https://www.securityfocus.com/bid/5585/info Linuxconf is a Linux configuration utility from Solucorp. It is typically installed as a setuid root utility for the management and configuration of Linux operating systems. ...

Linuxconf 1.1.x/1.2.x - Local Environment Variable Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/5585/info Linuxconf is a Linux configuration utility from Solucorp. It is typically installed as a setuid root utility for the management and configuration of Linux operating systems. A buffer overflow vulnerability has been reported for Linuxconf. The...

Linuxconf 1.1.x/1.2.x - Local Environment Variable Buffer Overflow (3)

source: https://www.securityfocus.com/bid/5585/info Linuxconf is a Linux configuration utility from Solucorp. It is typically installed as a setuid root utility for the management and configuration of Linux operating systems. A buffer overflow vulnerability has been reported for Linuxconf. The...

CVE-1999-1327

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable...

CVE-1999-1327

The CVE concerns linuxconf 1.11r11-rh2 on Red Hat Linux 5.1, where a boundary/buffer overflow triggered by a long LANG environment variable allows local users to gain root privileges. Affected component is linuxconf; root compromise is the stated impact. The description does not provide remediati...

CVE-1999-1328

linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack...

CVE-1999-1327: Undefined Security Weakness

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable...

CVE-1999-1328: Undefined Security Weakness

linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack...

CVE-1999-1348

Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service...

CVE-1999-1348

Technical details about CVE-1999-1348 are not publicly provided in the supplied documents. Monitor for updates; the available records describe the issue at a high level without specific impact, affected products, or remediation.

CVE-1999-1348: Undefined Security Weakness

Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service...

CVE-2001-0143

The CVE-2001-0143 issue affects the vpop3d component in the linuxconf package (versions 1.23r and earlier). The root cause is a temporary file race (symlink attack) that local users can exploit to overwrite arbitrary files. Public references in the Mandrake advisory MDKSA-2001:011 confirm the vul...

CVE-2001-0143

vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0143: Undefined Security Weakness

vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0143

vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack...

Linux News 17.08.00

2.2.17pre17 released На ftp.kernel.org/pub/linux/kernel/peopl... доступно новой ядро из серии пре-17. Списка изменений и анонса пока нигде нет. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/people/alan Linuxconf 1.20r2 Вышла новая версия популярной и мощной утилиты, предназначенной для...

Linux news 18.05.00

Linux 2.2.16pre3 Вышла новая pre-версия следующего стабильного ядра: Linux 2.2.16pre3. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-05-16-007-04-NW-KN Kernel Traffic 67 Вышел новый обзор Linux Kernel Traffic: 67. Подробнее: http://kt.linuxcare.com/kernel-traffic/kt2000051567print.epl...