3238 matches found
CVE-2001-0635
Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords...
Critical: Red Hat Security Advisory: : Updated Kerberos 5 packages now available
Updated Kerberos 5 packages are now available for Red Hat Linux 6.2, 7, and 7.1. These updates close vulnerabilities due to potential buffer overflows in the Kerberos-aware telnet server included in the krb5-workstation package. By exploiting buffer overflows in the telnet server included in the...
[RHSA-2001:093-03] Updated procmail packages available for Red Hat Linux 5.2, 6.2, 7 and 7.1
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated procmail packages available for Red Hat Linux 5.2, 6.2, 7 and 7.1 Advisory ID: RHSA-2001:093-03 Issue date: 2001-07-03 Updated on: 2001-07-13 Product: Red Hat Linux...
[RHSA-2001:095-04] New util-linux packages available to fix vipw permissions problems
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New util-linux packages available to fix vipw permissions problems Advisory ID: RHSA-2001:095-04 Issue date: 2001-07-12 Updated on: 2001-07-16 Product: Red Hat Linux Keywords:...
Moderate: Red Hat Security Advisory: : New util-linux packages available to fix vipw permissions problems
New util-linux packages are available for Red Hat Linux 7.1. These packages fix a problem where vipw would leave the /etc/shadow file world-readable after editing it. It is recommended that all users update to the fixed packages. Also, if you have used vipw on Red Hat Linux 7.1 before, make sure ...
Important: Red Hat Security Advisory: Kernel
A security hole has been found that does not affect the default configuration of Red Hat Linux, but it can affect some custom configurations of Red Hat Linux 7.1. The bug is specific to the Linux 2.4 kernel series. Aside from the fix, countless bugfixes have been applied to this kernel as a resul...
SSH allows deletion of other users files...
Sorry, I forgot some relevant information. With regards to previous post: Tested on:- Red Hat Linux release 7.0 Guinness zen-parse@clarity zen-parse$ rpm -qf /usr/sbin/sshd openssh-server-2.5.2p2-1.7.2 zen-parse@clarity zen-parse$ ssh -V OpenSSH2.5.2p2, SSH protocols 1.5/2.0, OpenSSL 0x0090581f T...
[RHSA-2001:074-03] Updated ispell packages available for Red Hat Linux 5.2 and 6.2
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated ispell packages available for Red Hat Linux 5.2 and 6.2 Advisory ID: RHSA-2001:074-03 Issue date: 2001-05-30 Updated on: 2001-06-04 Product: Red Hat Linux Keywords: ispe...
Critical: Red Hat Security Advisory: : Updated Kerberos 5 packages available
Updated Kerberos 5 packages are now available for Red Hat Linux 6.2, 7, and 7.1. These updates close a potential vulnerability present in the gssapi-aware ftpd included in the krb5-workstation package. By use of a carefully-crafted authentication request, a malicious client could exploit a...
CVE-2000-0829
The affected software is the tmpwatch utility in Red Hat Linux. The vulnerability arises because it forks a new process for each directory level when scanning /tmp or /var/tmp , enabling a local attacker to create deeply nested directories and trigger a denial of service . Exploitation details ar...
CVE-2000-0829
The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/...
[RHSA-2001:058-04] Updated mount package available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated mount package available Advisory ID: RHSA-2001:058-04 Issue date: 2001-04-25 Updated on: 2001-05-02 Product: Red Hat Linux Keywords: mount swapon swap permissions Cross...
Important: Red Hat Security Advisory: : Updated mount package available
Updated mount packages fixing a potential security problem are available. If any swap files were created during installation of Red Hat Linux 7.1 they were created during updates if the user requested it, they were world-readable, meaning every user could read data in the swap files, possibly...
[RHSA-2001:053-06] gftp format string vulnerability corrected
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: gftp format string vulnerability corrected Advisory ID: RHSA-2001:053-06 Issue date: 2001-04-20 Updated on: 2001-04-23 Product: Red Hat Linux Keywords: gftp format Cross...
CVE-2001-1467
mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks...
[RHSA-2001:008-02] Updated vim packages available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated vim packages available Advisory ID: RHSA-2001:008-02 Issue date: 2001-01-29 Updated on: 2001-03-21 Product: Red Hat Linux Keywords: vim vim-enhanced stl status line Cros...
[RHSA-2001:013-05] Three security holes fixed in new kernel
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Three security holes fixed in new kernel Advisory ID: RHSA-2001:013-05 Issue date: 2001-02-08 Updated on: 2001-02-08 Product: Red Hat Linux Keywords: sysctl ptrace mxcsr P4 Cros...
[RHSA-2001:006-03] Updated inetd packages available for Red Hat Linux 6.2
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated inetd packages available for Red Hat Linux 6.2 Advisory ID: RHSA-2001:006-03 Issue date: 2001-01-25 Updated on: 2001-01-30 Product: Red Hat Linux Keywords: inetd close...
CVE-2000-1189
CVE-2000-1189 describes a buffer overflow in the pam_localuser PAM module used by Red Hat Linux 7.x and 6.x, enabling privilege escalation. The underlying cause is a memory handling flaw in pam_localuser, leading to complete confidentiality, integrity, and availability impacts as stated in the CV...