Security Update: [CSSA-2001-SCO.2] UnixWare - su buffer overflow

To: [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare - su buffer overflow Advisory number: CSSA-2001-SCO.2 Issue date: 2001 June, 26 Cross reference: 1. Problem Description The su command is vulnerable to a comman...

ISS Advisory: BIND Inadvertent Local Exposure of HMAC-MD5 (TSIG) Keys

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

Security Advisories

TurboLinux Security Announcement Package: dialog Vulnerable Packages: All Turbolinux versions previous to 0.9a-2 Date: 05/03/2001 5:00 PDT Affected TurboLinux platforms: TL Server 6.5, TL Workstation 6.1 Turbolinux versions 6.0.5 and earlier TurboLinux Advisory ID: TLSA2001006 Credits: Reported b...

[TL-Security-Announce] fetchmail-5.5.0-3.i386.rpm TLSA2000024-1

TurboLinux Security Announcement Package: fetchmail-5.5.0-2 and earlier Date: Wednesday December 27 5:00 PDT 2000 Affected TurboLinux versions:TL 6.1 WorkStation, All TurboLinux versions 6.0.5 and earlier TurboLinux Advisory ID: TLSA2000024-1 Credits: This bug was reported by Red Hat on November...

[SECURITY] New version of ghostscript released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 23, 2000 - ------------------------------------------------------------------------ Package : gs Problem type : symlink...

CVE-2000-0301

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...

CVE-2000-0301

CVE-2000-0301 affects Ipswitch IMAIL server 6.02 and earlier. The issue enables remote attackers to cause a denial of service by sending the AUTH CRAM-MD5 command, impacting availability. The record lists a network-exposed attack with no authentication and a partial availability impact (CVSS v2 b...

: glibc 2.1.3 vulnerabilities patched

Three locale-related vulnerabilities with glibc 2.1.3 were recently reported on BugTraq. These vulnerabilities could allow local users to gain root access. Users of Slackware 7.0, 7.1, and -current are strongly urged to upgrade to the new glibc packages in the -current branch...

MDKSA-2000:034 MandrakeUpdate update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: MandrakeUpdate Date: August 12th, 2000 Advisory ID: MDKSA-2000:034 Affected versions: 6.0, 6.1, 7.0, 7.1 Problem Description: There is a possible race condition in MandrakeUpdate that has the...

MDKSA-2000:028 kon2 update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: kon2 Date: August 1st, 2000 Advisory ID: MDKSA-2000:028 Affected versions: 7.0, 7.1 Problem Description: There is a vulnerable suid program called fld. This program accepts option input from a text...

Re: IMAIL (Ipswitch) DoS with Eudora (Qualcomm)

I'm the lead developer for Windows Eudora here at Qualcomm, and I've been the one who has investigated these issues of SMTP authentication with IPSwitch's IMail server. Here's some details that may be helpful for IMail users: The problem is with IMail SMTP server versions 6.02 and below. When the...

CVE-2000-0301

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...

CVE-2000-0093

The CVE-2000-0093 entry concerns Red Hat installations that use DES-encrypted passwords via crypt() for the initial password instead of MD5. Affected component is the initial password handling in Red Hat setups; root cause is the use of DES crypt() rather than a stronger hash. Documents explicitl...

CVE-2000-0093

An installation of Red Hat uses DES password encryption with crypt for the initial password, instead of md5...

PT-2000-1082 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: Red Hat affected versions not specified Description: The issue is related to the use of DES password encryption with crypt for the initial password in Red Hat installations, instead of using md5 encryption. Recommendations: At the moment, the...

CVE-1999-0900

CVE-1999-0900 is a local privilege-escalation vulnerability in the RPC service rpc.yppasswdd. The issue is a buffer overflow that allows a local user to gain elevated privileges through MD5 hash generation. Various sources (NVD/Red Hat/CVE List) describe the same flaw without specifying vulnerabl...

CVE-1999-0900

Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation...

CVE-1999-0900

Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation...

PT-1999-1446 · Sun · Rpc.Yppasswdd

Name of the Vulnerable Software and Affected Versions: rpc.yppasswdd affected versions not specified Description: A buffer overflow issue exists in rpc.yppasswdd, allowing a local user to gain privileges through MD5 hash generation. Recommendations: At the moment, there is no information about a...

[SECURITY] New versions of man2html fixes postinst glitch

Former versions of man2html uses a static file in /tmp for writing. This can lead into overwriting system files if a malicious user has created a symbolic link to it before upgrading man2html. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you...