[SECURITY] [DSA-360-1] New xfstt packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 360-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 1st, 2003 http://www.debian.org/security/faq -...

CVE-2003-0418

The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses...

CVE-2003-0048

PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...

CVE-2003-0047

SSH2 clients for VanDyke 1 SecureCRT 4.0.2 and 3.4.7, 2 SecureFX 2.1.2 and 2.0.4, and 3 Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...

CVE-2003-0048

PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...

silc question - insecure memory

Good Evening, while screwing around tonight checking memory for the SSH2 advisory. I noticed passphrase and complete sessions from silc in memory. I dont know if this is normal for silc I wouldnt think it would be but all you need to do it is: cdowns@Vader:$ sudo dd if=/dev/mem...

FreeBSD-SA-02:38.signed-error

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:38.signed-error Security Advisory The FreeBSD Project Topic: Boundary checking errors involving signed integers Category: core Module: sys Announced: 2002-08-19 Credits:...

CVE-2002-0046

Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet...