CVE-2002-2089: Undefined Security Weakness

Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument...

krb5 security update

CentOS Errata and Security Advisory CESA-2005:567 Updated krb5 packages which fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 Sep 2005 krb5-server...

Fedora Core 4 : krb5-1.4.1-5 (2005-553)

A double-free flaw was found in the krb5recvauth routine which may be triggered by a remote unauthenticated attacker. Fedora Core 4 contains checks within glibc that detect double-free flaws. Therefore, on Fedora Core 4, successful exploitation of this issue can only lead to a denial of service K...

Fedora Core 3 : krb5-1.3.6-7 (2005-552)

A double-free flaw was found in the krb5recvauth routine which may be triggered by a remote unauthenticated attacker. Fedora Core 3 contains checks within glibc that detect double-free flaws. Therefore, on Fedora Core 3, successful exploitation of this issue can only lead to a denial of service K...

RHEL 4 : krb5 (RHSA-2005:567)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:567 advisory. Kerberos is a networked authentication system that uses a trusted third party a KDC to authenticate clients and servers to each other. A...

krb5 security update

CentOS Errata and Security Advisory CESA-2005:562 Updated krb5 packages which fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 Sep 2005 krb5-server...

Important: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a networked authentication system that uses a trusted third party a KDC to...

Critical: Red Hat Security Advisory: krb5 security update

Updated krb5 packages which fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 Sep 2005 krb5-server packages have been added to this advisory for Red...

[Full-disclosure] ASP.NET RCP/Encoded Web service DOS

ASP.NET RCP/Encoded Web service DOS http://www.spidynamics.com/spilabs/advisories/aspRCP.html Release Date: July 11, 2005 Severity: High System Affected IIS Servers exposing ASP.NET Web services that consume arrays in RCP/Encoded mode Applications using System.Xml.Serialization to consume untrust...

Mandrake Linux Security Advisory : rsh (MDKSA-2005:100)

A vulnerability in the rcp protocol was discovered that allows a server to instruct a client to write arbitrary files outside of the current directory, which could potentially be a security concern if a user used rcp to copy files from a malicious server. The updated packages have been patched to...

rsh security update

CentOS Errata and Security Advisory CESA-2005:495-01 Updated rsh packages that fix a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run...

Low: Red Hat Security Advisory: rsh security update

Updated rsh packages that fix a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to other machines, and...

Low: Red Hat Security Advisory: rsh security update

Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to...

RHEL 3 : rsh (RHSA-2005:074)

Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to...

rsh security update

CentOS Errata and Security Advisory CESA-2005:074 Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow use...

Low: Red Hat Security Advisory: rsh security update

Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to...

CVE-2003-0954

CVE-2003-0954 describes a buffer overflow in the remote copy protocol (rcp) on IBM AIX platforms (AIX 4.3.3, 5.1, 5.2) that allows local users to gain privileges. The root cause is a vulnerability in rcp leading to privilege escalation; affected component is rcp on the specified AIX versions. The...

CVE-2003-0954: Undefined Security Weakness

Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges...

CVE-2002-1621

Buffer overflow in the filecomp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code...

CVE-2002-1621

CVE-2002-1621 describes a buffer overflow in the file_comp function of rcp on IBM AIX 4.3.x and 5.1, allowing remote code execution. The vulnerability is tied to the rcp component and affects remote attack vectors with no authentication required, as indicated by the CVE description. No explicit r...