Mandrake Linux Security Advisory : cups (MDKSA-2002:015)

There is a potential buffer overflow vulnerability in CUPS when reading the names of attributes. This bug affects all versions of CUPS and is fixed upstream in version 1.1.14. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2001:056)

A number of remote buffer overflows were discovered in the tcpdump package that would allow a remote attack of the local tcpdump process. Intrusion detection using tcpdump would no longer be useful due to the attack stoping all network activity on the system. As well, this new version of tcpdump...

Mandrake Linux Security Advisory : xchat (MDKSA-2002:051)

In versions of the xchat IRC client prior to version 1.8.9, xchat does not filter the response from an IRC server when a /dns query is executed. xchat resolves hostnames by passing the configured resolver and hostname to a shell, so an IRC server may return a malicious response formatted so that...

Mandrake Linux Security Advisory : LPRng (MDKSA-2002:042)

Matthew Caron pointed out that using the LPRng default configuration, the lpd daemon will accept job submissions from any remote host. These updated LPRng packages modify the job submission policy in /etc/lpd.perms to refuse print jobs from remote hosts by default. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : webmin (MDKSA-2003:025)

A vulnerability was discovered in webmin by Cintia M. Imanishi, in the miniserv.pl program, which is the core server of webmin. This vulnerability allows an attacker to spoof a session ID by including special metacharacters in the BASE64 encoding string used during the authentication process. Thi...

Mandrake Linux Security Advisory : wv (MDKSA-2004:077)

iDefense discovered a buffer overflow vulnerability in the wv package which could allow an attacker to execute arbitrary code with the privileges of the user running the vulnerable application. The updated packages are patched to protect against this problem. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : WindowMaker (MDKSA-2002:085)

Al Viro discovered a vulnerability in the WindowMaker window manager. A function used to load images, for example when configuring a new background image or previewing themes, contains a buffer overflow. The function calculates the amount of memory necessary to load the image by doing some...

Mandrake Linux Security Advisory : gdm (MDKSA-2003:100)

Two vulnerabilities were discovered in gdm by Jarno Gassenbauer that would allow a local attacker to cause gdm to crash or freeze. The provided packages are patched to fix this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Mandrake Linux Security Advisory : mod_ssl (MDKSA-2002:048)

Frank Denis discovered an off-by-one error in modssl dealing with the handling of older configuration directorives the rewritecommand hook. A malicious user could use a specially crafted .htaccess file to execute arbitrary commands as the apache user or execute a DoS against the apache child...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2003:101)

A bug was discovered in fetchmail 6.2.4 where a specially crafted email message can cause fetchmail to crash. Thanks to Nalin Dahyabhai of Red Hat for providing the patch to fix the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

Mandrake Linux Security Advisory : cyrus-sasl (MDKSA-2002:018)

Kari Hurtta discovered that a format bug exists in the Cyrus SASL library, which is used to provide an authentication API for mail clients and servers, as well as other services such as LDAP. The format bug was found in one of the logging functions which could be used by an attacker to obtain...

Mandrake Linux Security Advisory : stunnel (MDKSA-2002:004)

All versions of stunnel from 3.15 to 3.21c are vulnerable to format string bugs in the functions which implement smtp, pop, and nntp client negotiations. Using stunnel with the '-n service' option and the '-c' client mode option, a malicious server could use the format sting vulnerability to run...

Mandrake Linux Security Advisory : MYSQL (MDKSA-2003:013)

Aleksander Adamowski informed MandrakeSoft that the MySQL developers fixed a DoS vulnerability in the recently released 3.23.55 version of MySQL. A double free pointer bug in the mysqlchangeuser handling would allow a specially hacked mysql client to crash the main mysqld server. This vulnerabili...

Mandrake Linux Security Advisory : xpcd (MDKSA-2004:053)

A vulnerability in xpcd-svga, part of xpcd, was discovered by Jaguar. xpcd-svga uses svgalib to display graphics on the console and it would copy user-supplied data of an arbitrary length into a fixed-size buffer in the pcdopen function. As well, Steve Kemp previously discovered a buffer overflow...

Mandrake Linux Security Advisory : xine-ui (MDKSA-2004:033)

Shaun Colley discovered a temporary file vulnerability in the xine-check script packaged in xine-ui. This problem could allow local attackers to overwrite arbitrary files with the privileges of the user invoking the script. The updated packages change the location of where temporary files are...

Mandrake Linux Security Advisory : wu-ftpd (MDKSA-2001:090)

A vulnerability in wu-ftpd's ftpglob function was found by the CORE ST team. This vulnerability can be exploited to obtain root access on the FTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux...

Mandrake Linux Security Advisory : tripwire (MDKSA-2004:057-1)

Paul Herman discovered a format string vulnerability in tripwire that could allow a local user to execute arbitrary code with the rights of the user running tripwire typically root. This vulnerability only exists when tripwire is generating an email report. Update : The packages previously releas...

Mandrake Linux Security Advisory : mm (MDKSA-2002:045)

Marcus Meissner and Sebastian Krahmer discovered a temporary file vulnerability in the mm library which is used by the Apache webserver. This vulnerability can be exploited to obtain root privilege if shell access to the apache user typically apache or nobody is already obtained. %NASLMINLEVEL...

Mandrake Linux Security Advisory : mgetty (MDKSA-2003:053-1)

Two vulnerabilities were discovered in mgetty versions prior to 1.1.29. An internal buffer could be overflowed if the caller name reported by the modem, via Caller ID information, was too long. As well, the faxspool script that comes with mgetty used a simple permissions scheme to allow or deny f...

Mandrake Linux Security Advisory : webmin (MDKSA-2002:033)

A vulnerability exists in all versions of Webmin prior to 0.970 that allows a remote attacker to login to Webmin as any user. All users of Webmin are encouraged to upgrade immediately. Users of Mandrake Linux 8.0 and earlier will need to install some additional perl modules for this new version o...