[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 675-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 675-1] New hztty packages fix local utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 675-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0261

CVE-2005-0261 affects AIX 5.2, 5.3, and possibly earlier versions. The vulnerability arises because lspath does not drop privileges before processing the -f option, enabling a local user to read a single line from arbitrary files. The connected documents do not provide a patch version or explicit...

[SECURITY] [DSA 672-1] New xview packages fix potential arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 672-1 [email protected] http://www.debian.org/security/ Martin Schulze February 9th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading

-------------------------------------------------------------------------- Debian Security Advisory DSA 667-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 664-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 664-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2005 http://www.debian.org/security/faq -...

DMA-2005-0127a.txt

DMA2005-0127a - 'Apple OSX batch family poor use of setuid' Author: Kevin Finisterre Vendor: http://www.apple.com/macosx/ Product: at commands = Mac OS X v10.3.7, Mac OS X Server v10.3.7 References: CAN-2005-0125 http://www.digitalmunition.com/DMA2005-0127a.txt...

[SECURITY] [DSA 658-1] New libdbi-perl packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 658-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 658-1] New libdbi-perl packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 658-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25th, 2005 http://www.debian.org/security/faq -...

Darwin Kernel 7.1 - Mach File Parsing Local Integer Overflow

Darwin Kernel 7.1 - Mach File Parsing Local Integer Overflow / source: https://www.securityfocus.com/bid/12314/info Reportedly a local integer overflow vulnerability affects the Darwin Kernel. This issue is due to a failure of the affected to properly handle integer signedness. An attacker may...

Darwin Kernel 7.1 - Mach File Parsing Local Integer Overflow

/ source: https://www.securityfocus.com/bid/12314/info Reportedly a local integer overflow vulnerability affects the Darwin Kernel. This issue is due to a failure of the affected to properly handle integer signedness. An attacker may leverage this issue to cause the affected computer to crash,...

[SECURITY] [DSA 640-1] New gatos packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 640-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2005 http://www.debian.org/security/faq -...

Mod_dosevasive symlink and race vulnerability

LSS Security Advisory LSS-2005-01-01 http://security.lss.hr --- Title : Moddosevasive symlink and race vulnerability Advisory ID : LSS-2005-01-4 Date : January 1th, 2005 Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-01 Impact : Arbitrary file creation Risk level ...

LSS-2005-01-03.txt

LSS Security Advisory LSS-2005-01-03 http://security.lss.hr --- Title : Squirrelmail vacation v0.15 local root exploit Advisory ID : LSS-2005-01-03 Date : 10.01.2005. Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-03 Impact : Privilege escalation and arbitrary fil...

IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G)

NGSSoftware Insight Security Research Advisory Name: IBM DB2 tochar and todate Denial Of Service Systems Affected: DB2 8.1 Severity: High risk from local Vendor URL: http://www.ibm.com/ Author: Chris Anley chris at ngssoftware.com Relates to: http://www.ngssoftware.com/advisories/db2-02.txt Date ...

CVE-2004-2148

Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors...

Solaris 8/9 passwd - 'circ()' Local Privilege Escalation

/ $Id: raptorpasswd.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorpasswd.c - passwd circ local, Solaris/SPARC 8/9 Copyright c 2004 Marco Ivaldi Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors CAN-2004-0360. "Those of you...

[SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 615-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 610-1] New cscope packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 610-1 [email protected] http://www.debian.org/security/ Martin Schulze December 17th, 2004 http://www.debian.org/security/faq -...