Important: Red Hat Security Advisory: kernel security update

This kernel update for Red Hat Linux Advanced Server 2.1 addresses some security issues and provides minor bug fixes. The Linux kernel handles the basic functions of the operating system. A number of vulnerabilities were found in the Red Hat Linux Advanced Server kernel. These vulnerabilities cou...

Important: Red Hat Security Advisory: : Updated ypserv packages fixes memory leak

Updated ypserv packages which fix a memory leak are now available for Red Hat Linux 7.x and 6.2. ypserv is an NIS authentication server. ypserv versions before 2.5 contain a memory leak that can be triggered remotely. When someone requests a map that doesn't exist, a previous mapname may be leake...

Important: Red Hat Security Advisory: : Updated Mozilla packages fix security vulnerabilities

Updated Mozilla packages are now available for Red Hat Linux. These new packages fix vulnerabilities in previous versions of Mozilla. Mozilla is an open source web browser. Versions of Mozilla previous to version 1.0.1 contain various security vulnerabilities. These vulnerabilities could be used ...

[RHSA-2002:205-15] New kernel fixes local security issues

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel fixes local security issues Advisory ID: RHSA-2002:205-15 Issue date: 2002-09-20 Updated on: 2002-10-15 Product: Red Hat Linux Keywords: Cross references: Obsoletes:...

[RHSA-2002:206-12] New kernel fixes local security issues

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel fixes local security issues Advisory ID: RHSA-2002:206-12 Issue date: 2002-09-23 Updated on: 2002-10-15 Product: Red Hat Linux Keywords: Cross references: Obsoletes:...

[RHSA-2002:210-06] New kernel 2.2 packages fix local vulnerabilities

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel 2.2 packages fix local vulnerabilities Advisory ID: RHSA-2002:210-06 Issue date: 2002-09-23 Updated on: 2002-10-10 Product: Red Hat Linux Keywords: elevated local roo...

Moderate: Red Hat Security Advisory: : Updated xinetd packages fix denial of service vulnerability

Xinetd contains a denial-of-service DoS vulnerability. UPDATE 2002-12-02: Updated packages are available to fix issues encountered with the previous errata packages. Xinetd is a secure replacement for inetd, the Internet services daemon. Versions of Xinetd prior to 2.3.7 leak file descriptors for...

Important: Red Hat Security Advisory: : Updated nss_ldap packages fix buffer overflow

Updated nssldap packages are now available for Red Hat Linux 6.2, 7, 7.1, 7.2, and 7.3. These updates fix a potential buffer overflow which can occur when nssldap is set to configure itself using information stored in DNS, a format string bug in logging functions used in pamldap, and to properly...

Moderate: Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in resolver

Updated glibc packages are available to fix a buffer overflow in the resolver. The GNU C library package, glibc, contains standard libraries used by multiple programs on the system. A read buffer overflow vulnerability exists in the glibc resolver code in versions of glibc up to and including...

Moderate: Red Hat Security Advisory: ethereal security update

Updated ethereal packages are available which fix several security problems. Ethereal is a package designed for monitoring network traffic on your system. Several security issues have been found in the Ethereal packages distributed with Red Hat Linux Advanced Server: Buffer overflow in Ethereal...

Guardent Client Advisory: Multiple wordtrans-web Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Guardent Client Advisory Multiple wordtrans-web Vulnerabilities September 6th, 2002 Summary: Guardent has discovered vulnerabilities in the wordtrans-web package. The vulnerabilities allow for remote execution of arbitrary code under the privileges of user runni...

Important: Red Hat Security Advisory: gaim security update

Updated gaim packages are now available for Red Hat Linux Advanced Server. These updates fix a vulnerability in the default URL handler. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prio...

CVE-2000-1214

Buffer overflows in the 1 outpack or 2 buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges...

CVE-2000-1213

The CVE-2000-1213 entry concerns ping (iputils) before 20001010, distributed on Red Hat Linux 6.2–7J and other OSes. The root cause is that ping fails to drop privileges after acquiring a raw socket, increasing exposure to bugs that would occur at lower privileges. The vulnerability is tied to th...

CVE-2000-1214

The CVE-2000-1214 issue affects the iputils package’s ping utility. Specifically, buffer overflow vulnerabilities exist in the (1) outpack and (2) buf variables within ping on iputils versions prior to the 20001010 release, as distributed on Red Hat Linux 6.2 through 7J and other operating system...

CVE-2000-1213

ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges...

iDEFENSE Security Advisory: Linuxconf locally exploitable buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 08.28.2002 Linuxconf locally exploitable buffer overflow vulnerability DESCRIPTION A vulnerability exists in linuxconf which if the LINUXCONFLANG environment variable processes at least 964 bytes of data, a buffer overflow...

[RHSA-2002:158-09] New kernel update available, fixes i810 video oops, several security issues

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel update available, fixes i810 video oops, several security issues Advisory ID: RHSA-2002:158-09 Issue date: 2002-07-26 Updated on: 2002-08-20 Product: Red Hat Linux...

CVE-2002-0638

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in...

CVE-2002-0849

CVE-2002-0849 : The Linux-iSCSI implementation installs the iscsi.conf file with world-readable permissions on some OSes (e.g., Red Hat Linux Limbo Beta #1), which could allow local users to gain privileges by reading the cleartext CHAP password. Root cause: file permissions on iscsi.conf. Impact...