Mandrake Linux Security Advisory : ethereal (MDKSA-2004:067)

Three vulnerabilities were discovered in Ethereal versions prior to 0.10.5 in the iSNS, SMB SID, and SNMP dissectors. It may be possible to make Ethereal crash or run arbitrary code by injecting a purposefully malformed packet into the wire or by convincing someone to read a malformed packet trac...

Mandrake Linux Security Advisory : squid (MDKSA-2001:088)

Vladimir Ivaschenko found a problem in the squid proxy server. Certain FTP requests could cause the squid daemon to abort, making it unavailable for a few seconds. If enough of these requests are sent in a short period of time, the squid daemon will not restart itself. %NASLMINLEVEL 70300 C Tenab...

Mandrake Linux Security Advisory : screen (MDKSA-2003:113)

A vulnerability was discovered and fixed in screen by Timo Sirainen who found an exploitable buffer overflow that allowed privilege escalation. This vulnerability also has the potential to allow attackers to gain control of another user's screen session. The ability to exploit is not trivial and...

Mandrake Linux Security Advisory : squid (MDKSA-2002:027)

A security issue has recently been found and fixed in the Squid-2.X releases up to and including 2.4.STABLE4. Error and boundary conditions were not checked when handling compressed DNS answer messages in the internal DNS code lib/rfc1035.c. A malicous DNS server could craft a DNS reply that caus...

Mandrake Linux Security Advisory : webmin (MDKSA-2001:059)

Recently, Caldera found that when webmin starts a system daemon from the web frontend it does not clear its environment variables. Since these variables contain the authorization of the administrator, any daemon would also get these variables. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandrake Linux Security Advisory : pwlib (MDKSA-2004:017)

The NISCC uncovered bugs in pwlib prior to version 1.6.0 via a test suite for the H.225 protocol. An attacker could trigger these bugs by sending carefully crafted messages to an application that uses pwlib, and the severity would vary based on the application, but likely would result in a Denial...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2003:011)

A vulnerability was discovered in all versions of fetchmail prior to 6.2.0 that allows a remote attacker to crash fetchmail and potentially execute arbitrary code by sending carefully crafted email wihch is then parsed by fetchmail. The vulnerability has been fixed in these patched packages of...

Mandrake Linux Security Advisory : imap (MDKSA-2002:034)

A buffer overflow was discovered in the imap server that could allow a malicious user to run code on the server with the uid and gid of the email owner by constructing a malformed request that would trigger the buffer overflow. However, the user must successfully authenticate to the imap service ...

Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2004:027)

A very serious security flaw was discovered by Ralf Spenneberg in racoon, the IKE daemon of the KAME-tools. Racoon does not very the RSA signature during phase one of a connection using either main or aggressive mode. Only the certificate of the client is verified, the certificate is not used to...

CVE-2004-0581

CVE-2004-0581 affects Mandrake Linux 9.1–10.0 and Corporate Server 2.1, where the ksymoop s-gznm script allows local users to delete arbitrary files via a symlink attack on files in /tmp. The root cause, as described in related advisories, is improper checking when copying a file to /tmp, enablin...

CVE-2004-0581

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp...

CVE-2004-0581: Undefined Security Weakness

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp...

MDKSA-2004:025 - Updated squid packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: squid Advisory ID: MDKSA-2004:025 Date: March 30th, 2004 Affected versions: 9.1, 9.2, 10.0, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: A vulnerability was discovered in...

[Full-Disclosure] MDKSA-2004:016 - Updated mtools packages fix local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: mtools Advisory ID: MDKSA-2004:016 Date: February 25th, 2004 Affected versions: 9.2 Problem Description: Sebastian Krahmer found that the mformat program, when installed suid root, can create any...

MDKSA-2003:112-1 - Updated cvs packages fix malformed module request vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: cvs Advisory ID: MDKSA-2003:112-1 Date: December 10th, 2003 Original Advisory Date: December 8th, 2003 Affected versions: 9.1, 9.2 Problem Description: A vulnerability was discovered in the CVS...

[Full-Disclosure] MDKSA-2003:101 - Updated fetchmail packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: fetchmail Advisory ID: MDKSA-2003:101 Date: October 16th, 2003 Affected versions: 9.2 Problem Description: A bug was discovered in fetchmail 6.2.4 where a specially crafted email message can cause...

[Full-Disclosure] MDKSA-2003:086 - Updated sendmail packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: sendmail Advisory ID: MDKSA-2003:086 Date: August 26th, 2003 Affected versions: 8.2, 9.0, Corporate Server 2.1 Problem Description: A vulnerability was discovered in all 8.12.x versions of sendmail...

Tower Toppler 0.96 - HOME Environment Local Buffer Overflow

Tower Toppler 0.96 - HOME Environment Local Buffer Overflow // source: https://www.securityfocus.com/bid/8132/info A problem with the software may make elevation of privileges possible. It has been reported that a buffer overflow exists in Tower Toppler. A local user may be able to exploit this...

MDKSA-2003:072 - Updated ypserv packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: ypserv Advisory ID: MDKSA-2003:072 Date: June 27th, 2003 Affected versions: 8.2, 9.0, Corporate Server 2.1 Problem Description: A vulnerability was found in versions of ypserv prior to version 2.7...

Mandrake Linux 8.2 /usr/mail local exploit (d86mail.pl)

Exploit for linux platform in category local exploits ======================================================= Mandrake Linux 8.2 /usr/mail local exploit d86mail.pl ======================================================= !/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl...