GNU Tar contains_dot_dot函数远程目录遍历漏洞

BUGTRAQ ID: 25417 CVECAN ID: CVE-2007-4131 GNU tar可创建和解压tar文档，并进行各种存档文件管理。 GNU tar在处理符号链接时存在漏洞，本地攻击者可能利用此漏洞提升权限或破坏文件。 GNU tar的containsdotdot函数没有正确地检查目录符号链接的名称，恶意用户所创建tar文档可以写入运行GNU tar的用户可写访问的任意文件。 GNU tar = 1.15.91 RedHat已经为此发布了一个安全公告（RHSA-2007:0860-01）以及相应补丁: RHSA-2007:0860-01：Moderate: tar...

Security fix for the ALT Linux 5 package netpbm version 10.35.30-alt1

Aug. 20, 2007 Alexey Tourbin 10.35.30-alt1 - 10.33 - 10.35.30 from netpbm.svn.sourceforge.net repo + fixes buffer overflow in pamtofits CVE-2006-3145 - sync RedHat patches Jindrich Novy, 10.35-14 + pamscale won't waste all system resources by usage of uninitialized variables for output image...

RHEL 4 : libgtop2 (RHSA-2007:0765)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0765 advisory. - Stack overflow libgtop when pathname of mmap-ed file is too long CVE-2007-0235 Note that Nessus has not tested for this issue but has instead relie...

RHEL 4 / 5 : tetex (RHSA-2007:0731)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0731 advisory. - xpdf integer overflow CVE-2007-3387 Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

USN-489-2: redhat-cluster-suite vulnerability

USN-489-1 fixed vulnerabilities in the Linux kernel. This update provides the corresponding fixes for the redhat cluster suite kernel sources. Original advisory details: A flaw was discovered in the cluster manager. A remote attacker could connect to the DLM port and block further DLM operations...

Linux PowerPC Kernel Restore_Sigcontext本地拒绝服务漏洞

BUGTRAQ ID: 24845 CVE ID:CVE-2007-3107 CNCVE ID:CNCVE-20073107 Linux PowerPC是一款嵌入式Linux操作系统。 Linux PowerPC存在一个信号处理缺陷，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。...

possible buffer overflow could cause local DoS by crashing cman

Buffer overflow in cluster/cman/daemon/daemon.c in cman redhat-cluster-suite before 20070622 allows local users to cause a denial of service crash and possibly execute arbitrary code via long client messages...

Apache HTTP Server Mod_Cache拒绝服务漏洞

Apache HTTP Server是一款开放源代码的WEB服务程序。 Apache HTTP Server包含的Modcache存在设计错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 如果Cache-Control头字段数据s-maxage, max-age, min-fresh, max-stale其中一个值不赋值，那么Modcache模块在解析的时候可导致应用程序崩溃，造成拒绝服务攻击。 RedHat Enterprise Linux Desktop Workstation v. 5 client RedHat Enterprise Linux Desktop v.5...

Buffer overflow

Buffer overflow in cluster/cman/daemon/daemon.c in cman redhat-cluster-suite before 20070622 allows local users to cause a denial of service crash and possibly execute arbitrary code via long client messages...

CVE-2007-3374

Buffer overflow in cluster/cman/daemon/daemon.c in cman redhat-cluster-suite before 20070622 allows local users to cause a denial of service crash and possibly execute arbitrary code via long client messages...

CVE-2007-3374

CVE-2007-3374 concerns a buffer overflow in the cman daemon (cluster/cman/daemon/daemon.c) of the Red Hat Cluster Suite (cman). The flaw allows a local attacker to crash the service and, potentially, execute arbitrary code via lengthy client messages. Public records from RHSA-2007:0559 and relate...

CVE-2007-3373

daemon.c in cman redhat-cluster-suite before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests...

CVE-2007-3373

CVE-2007-3373 affects daemon.c in cman (redhat-cluster-suite) prior to 20070622, where a buffer is not cleared when reading requests. This may allow local users to obtain sensitive information from previous requests. The NVD entry lists a Medium base score (5.0) with Network attack vector and Low...

Redhat Linux cluster service multiple security vulnerabilities

Uninitialized memory, buffer oveflows...

[email protected], [email protected]

=========================================================== Ubuntu Security Notice USN-476-1 June 22, 2007 redhat-cluster-suite vulnerability https://launchpad.net/bugs/121780 =========================================================== A security issue affects the following Ubuntu releases: Ubunt...

USN-476-1: redhat-cluster-suite vulnerability

Fabio Massimo Di Nitto discovered that cman did not correctly validate the size of client messages. A local user could send a specially crafted message and execute arbitrary code with cluster manager privileges or crash the manager, leading to a denial of service...

mod_perl security update

CentOS Errata and Security Advisory CESA-2007:0395 Updated modperl packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Modperl incorporates a Perl interpreter int...

Quagga BGPD UPDATE消息远程拒绝服务漏洞

Quagga是一款基于TCP/IP路由软件套件。 Quagga's bgpd存在一个越界内存读取问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者发送一个特殊构建的，畸形的多协议可到达/不可到达NLRI属性的UPDATE消息，可触发Quagga's bgpd发生assert而放弃，导致拒绝服务攻击。 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu...

shadow security update

CentOS Errata and Security Advisory CESA-2007:0431 An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary program...

PHP EXT/Session HTTP应答头注入漏洞

PHP是一款广泛使用的WEB开发脚本语言。 PHP的ext/session在置于会话COOKIE前没有URL编码会话ID，远程攻击者可以利用漏洞可以对会话COOKIE进行注入攻击。 当PHP' ext/session调用sessionstart，会在部分情况下发送新会话COOKIE，这些情况如下： - session id嵌入到PATHINFO - session id重生成 - session id通过sessionid设置 - sessionstart多次调用...