3238 matches found
Ehud Gavron TrACESroute 6.1.1 - Terminator Function Format String
source: https://www.securityfocus.com/bid/4956/info A format string vulnerability exists in TrACESroute. The problem exists in the terminator -T function of the program. Due to improper use of the fprintf function, an attacker may be able to supply a malicious format string to the program that...
Ehud Gavron TrACESroute 6.1.1 - Terminator Function Format String
Ehud Gavron TrACESroute 6.1.1 - Terminator Function Format String source: https://www.securityfocus.com/bid/4956/info A format string vulnerability exists in TrACESroute. The problem exists in the terminator -T function of the program. Due to improper use of the fprintf function, an attacker may ...
Moderate: Red Hat Security Advisory: : Updated tcpdump packages fix buffer overflow
Updated tcpdump, libpcap, and arpwatch packages are available for Red Hat Linux 6.2 and 7.x. These updates close a buffer overflow when handling NFS packets. Update 3 October 2002 Replacement packages have been added for Red Hat Linux 6.2 as the previous packages could not be installed with the...
CVE-2002-0169
The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier...
Important: Red Hat Security Advisory: : : : Updated nss_ldap packages fix pam_ldap vulnerability
Updated nssldap packages are now available for Red Hat Linux 6.2, 7, 7.1, 7.2, and 7.3. These packages fix a string format vulnerability in the pamldap module. Update Jun 4, 2002 Replacement packages have been added for Red Hat Linux 6.2. The previous packages could not be installed with the...
[RHSA-2002:078-04] Updated mpg321 packages available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated mpg321 packages available Advisory ID: RHSA-2002:078-04 Issue date: 2002-04-30 Updated on: 2002-05-06 Product: Red Hat Linux Keywords: mp321 buffer overflow network Cros...
[RHSA-2002:062-08] Insecure DocBook stylesheet option
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Insecure DocBook stylesheet option Advisory ID: RHSA-2002:062-08 Issue date: 2002-04-11 Updated on: 2002-04-26 Product: Red Hat Linux Keywords: docbook stylesheet Cross...
[RHSA-2002:070-06] Updated mod_python packages available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated modpython packages available Advisory ID: RHSA-2002:070-06 Issue date: 2002-04-22 Updated on: 2002-05-02 Product: Red Hat Linux Keywords: modpython publisher imported...
logwatch211.sh
--- INTRO --- LogWatch is a customizable log analysis system. LogWatch parses through your system's logs for a given period of time and creates a report analyzing areas that you specify, in as much detail as you require. The collected results are reported to a chosen e-mail address, root by...
Important: Red Hat Security Advisory: : New imlib packages available
Updated imlib packages are now available for Red Hat Linux 6.2, 7, 7.1 and 7.2 which fix potential problems loading untrusted images. Imlib versions prior to 1.9.13 would fall back to loading images via the NetPBM package, which has various problems making it unsuitable for loading untrusted...
Moderate: Red Hat Security Advisory: : Vulnerability in zlib library (powertools)
Update 20 Mar 2002: VNC packages updated to fix another denial of service vulnerability caused by the previous update. Thanks to Const Kaplinsky for discovering this issue. The zlib compression library provides in-memory compression and decompression functions. It is widely used throughout Linux...
CVE-1999-1335
CVE-1999-1335 concerns the cmu-snmp package’s snmpd server on Red Hat Linux 4.0 prior to 3.3-1. The vulnerability arises because snmpd is configured to allow remote attackers to read and write sensitive information. Affected product: cmu-snmp snmpd; vulnerable version before 3.3-1. Remediation pe...
CVE-1999-1331
netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface...
CVE-2001-0859
The CVE-2001-0859 entry concerns Red Hat Linux 7.1 (Korean installation) using kernel version 2.4.3-12, where the init default umask is set to 000. This causes installers to create files with world-writable permissions. The vulnerability details indicate the impact is limited to exposure via worl...
CVE-2001-0635
Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords...
CVE-1999-1335
snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information...
CVE-2001-0635
Red Hat Linux 7.1 is affected by CVE-2001-0635 due to insecure permissions on swap files created at install. The swap files could be world-readable, enabling a local attacker to read sensitive data such as passwords and potentially escalate privileges. The connected Red Hat advisory RHSA-2001:058...
CVE-1999-1332
Technical details about CVE-1999-1332 are not publicly provided in the connected documents you supplied; existing entries mention the vulnerability in gzexe but do not reveal affected versions, impact specifics, or fixes.
CVE-1999-1328
CVE-1999-1328 affects linuxconf prior to 1.11.r11-rh3 on Red Hat Linux 5.1. The issue arises from a symlink attack that lets local attackers overwrite arbitrary files and escalate to root privileges. The connected documents confirm the vulnerable component (linuxconf), the affected version range,...
