Critical: Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in RPC XDR decoder

Updated glibc packages are available to fix an integer overflow in the XDR decoder. The glibc package contains standard libraries that are used by multiple programs on the system. Sun RPC is a remote procedure call framework that allows clients to invoke procedures in a server process over a...

CVE-2003-0080

The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled...

CVE-2003-0080

The vulnerability is in Red Hat Linux 8.0’s Gnome-lokkit, where the iptables ruleset leaves the FORWARD chain without any rules. This permits bypassing intended access restrictions if packet forwarding is enabled, by an attacker who can trigger forwarding. The affected component is the iptables r...

Critical: Red Hat Security Advisory: : New samba packages fix security vulnerabilities

Updated Samba packages are now available to fix security vulnerabilities found during a code audit. Updated 24 March 2003 Updated Samba packages for Red Hat Linux 6.2, 7, and 7.1 are now included. These packages contain Samba version 2.0.10 with a backported security fix. Updated 1 April 2003...

Important: Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerability

Updated kernel packages for Red Hat Linux 7.1, 7.2, 7.3, and 8.0 are now available. These packages fix a ptrace-related vulnerability that can lead to elevated root privileges. Updated 30 March 2003 Updated kernel packages for Red Hat Linux 7.2 ia64 have been added. Updated 28 May 2003 Replacemen...

PXE Server 2.0 - Remote Buffer Overrun

PXE Server 2.0 - Remote Buffer Overrun // source: https://www.securityfocus.com/bid/7129/info A vulnerability has been discovered in PXE which is included with Red Hat Linux. Specifically, it is possible for a remote attacker to overrun a buffer by passing excessive data to the service. This may...

PXE Server 2.0 - Remote Buffer Overrun

// source: https://www.securityfocus.com/bid/7129/info A vulnerability has been discovered in PXE which is included with Red Hat Linux. Specifically, it is possible for a remote attacker to overrun a buffer by passing excessive data to the service. This may result in the corruption of sensitive...

[RHSA-2003:057-06] Updated shadow-utils packages fix exposure

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated shadow-utils packages fix exposure Advisory ID: RHSA-2003:057-06 Issue date: 2003-02-12 Updated on: 2003-02-18 Product: Red Hat Linux Keywords: mail mailspool Cross...

Low: Red Hat Security Advisory: fileutils security update

Updated fileutils packages are available which fix a race condition in recursive remove and move commands. The fileutils package includes a number of GNU versions of common and popular file management utilities. A race condition in recursive use of rm and mv commands in fileutils 4.1 and earlier...

CVE-2003-0019

umlnet in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode...

Low: Red Hat Security Advisory: : : : Updated fileutils package fixes race condition in recursive operations

New fileutils packages for Red Hat Linux 6.2, 7.0, 7.1, 7.2 and 7.3 fix a race condition in recursive remove and move commands. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The fileutils package includes a number of GNU versions of common and popular...

Important: Red Hat Security Advisory: : : : Updated PAM packages fix bug in pam_xauth module

Updated PAM packages are now available for Red Hat Linux 7.1, 7.2, 7.3, and 8.0. These packages correct a bug in pamxauth's handling of authorization data for the root user. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The pamxauth module is used to...

Low: Red Hat Security Advisory: : : : Updated lynx packages fix CRLF injection vulnerability

Updated lynx packages are available that fix an error in the way lynx parses its command line arguments, which can lead to faked headers being sent to a web server. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. Lynx is a character-cell Web browser,...

Important: Red Hat Security Advisory: mozilla security update

Updated Mozilla packages are now available for Red Hat Linux Advanced Server. These new packages fix vulnerabilities in previous versions of Mozilla. Mozilla is an open source Web browser. Versions of Mozilla prior to version 1.0.1 contain various security vulnerabilities. These vulnerabilities...

kernel-utils sets insecure permissions on "uml_net" utility

Overview The umlnet utility, part of the kernel-utils package in Red Hat Linux 8.0, was shipped with incorrect permissions. Description User-Mode Linux UML is a tool to provide a virtual machine in which to run another copy of Linux. In Red Hat linux 8.0, the kernel-utils package contains the UML...

[RHSA-2003:043-12] Updated WindowMaker packages fix vulnerability in theme-loading

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated WindowMaker packages fix vulnerability in theme-loading Advisory ID: RHSA-2003:043-12 Issue date: 0000-01-01 Updated on: 2003-02-05 Product: Red Hat Linux Keywords:...

Moderate: Red Hat Security Advisory: : Updated w3m packages fix cross-site scripting issues

New w3m packages are available that fix two cross-site scripting issues. w3m is a pager with Web browsing capabilities. Two cross-site scripting XSS issues have been found in w3m. An XSS vulnerability in w3m 0.3.2 allows remote attackers to insert arbitrary HTML and web script into frames. Frames...

Important: Red Hat Security Advisory: : : : Updated Xpdf packages fix security vulnerability

Updated Xpdf packages are now available that fix a vulnerability in which a maliciously-crafted pdf document could run arbitrary code. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. Xpdf is a viewer for Portable Document Format PDF files. During an audi...

Critical: Red Hat Security Advisory: : Updated openldap packages available

Updated openldap packages are available which fix a number of local and remote buffer overflows in libldap and the slapd and slurpd servers, and potential issues stemming from using user-specified LDAP configuration files. OpenLDAP is a suite of LDAP Lightweight Directory Access Protocol...

[RHSA-2003:025-20] Updated 2.4 kernel fixes various vulnerabilities

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated 2.4 kernel fixes various vulnerabilities Advisory ID: RHSA-2003:025-20 Issue date: 2003-01-24 Updated on: 2003-02-03 Product: Red Hat Linux Keywords: ethernet frame...