CVE-2001-0923

CVE-2001-0923 affects RPM Package Manager 4.0.x through 4.0.2.x and allows an attacker to execute arbitrary code via corrupted data in an RPM file when the file is queried. The NVD/CVE entries provide the vulnerability description and a CVSS v2 base score of 7.2 (HIGH) with LOCAL attack vector, b...

CVE-2001-0923

RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried...

CVE-2001-0923: Undefined Security Weakness

RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried...

[RHSA-2001:164-08] Updated secureweb packages available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated secureweb packages available Advisory ID: RHSA-2001:164-08 Issue date: 2001-12-05 Updated on: 2001-12-07 Product: Red Hat Secure Web Server Keywords: secureweb directory...

CVE-2001-0923

RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried...

Проблема с RPM в Rad Hat (buffer overflow)

No description provided...

Advisory: Corrupt RPM Query Vulnerability

Description: Arbitrary command executing on query of corrupt RPM files note: you do not have to install the file to be affected Severity: Very Low to Low Unless running an lpd with no access restrictions, in which case, it may allow remote compromize. Affects: rpm-4.0.2-7x probably also earlier...

[RHSA-2001:093-03] Updated procmail packages available for Red Hat Linux 5.2, 6.2, 7 and 7.1

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated procmail packages available for Red Hat Linux 5.2, 6.2, 7 and 7.1 Advisory ID: RHSA-2001:093-03 Issue date: 2001-07-03 Updated on: 2001-07-13 Product: Red Hat Linux...

suid xman 3.1.6 overflows

xman from at least X11R6-contrib-3.3.2-3.i386.rpm suffers from a classic overflow [email protected] is noted as the packager of this RPM. I do not know the author. root@linux lib ls -al which xman -rwxr-sr-x 1 root man 41076 Jun 17 1998 /usr/X11R6/bin/xman root@linux lib xman root@linux li...

Security Announcement: nedit (SuSE-SA:2001:14)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: nedit Announcement-ID: SuSE-SA:2001:14 Date: Wednesday, April 18th, 2001 13.06 MEST Affected SuSE versions: 6.1, 6.2 6.3, 6.4, 7.0, 7.1 Vulnerability Type: locoal privilege escalation Severity 1-10: 3 SuSE default package: no...

[RHSA-2001:006-03] Updated inetd packages available for Red Hat Linux 6.2

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated inetd packages available for Red Hat Linux 6.2 Advisory ID: RHSA-2001:006-03 Issue date: 2001-01-25 Updated on: 2001-01-30 Product: Red Hat Linux Keywords: inetd close...

[RHSA-2000:024-02] Updated nss_ldap packages are now available.

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Updated nssldap packages are now available. Advisory ID: RHSA-2000:024-02 Issue date: 2000-10-27 Updated on: 2000-10-27 Product: Red Hat Linux Keywords: N/A Cross references: N/A...

CVE-2000-0722

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages...

CVE-2000-0718

A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed...

CVE-2000-0718

CVE-2000-0718 affects MandrakeUpdate. A race condition enables local attackers to modify RPM files while they reside in /tmp before installation, compromising file integrity of packages. The NVD entry notes a low base score (1.2) with local attack vector and no confidentiality or availability imp...

CVE-2000-0718

A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed...

CVE-2000-0718: Undefined Security Weakness

A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed...

[RHSA-2000:062-03] glint symlink vulnerability

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: glint symlink vulnerability Advisory ID: RHSA-2000:062-03 Issue date: 2000-09-19 Updated on: 2000-09-19 Product: Red Hat Linux Keywords: glint symlink rpm Cross references: N/A...

CVE-2000-0722

The CVE-2000-0722 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier. It describes a local-privilege issue where an attacker can cause the installation of arbitrary RPM packages by pre-creating the /tmp/helix-install directory before the package installation sequence begins...

CVE-2000-0722

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages...