linuxconf.txt

Date: Sat, 22 Aug 1998 20:35:42 -0500 From: Alex Mottram Subject: Security concerns in linuxconf shipped w/RedHat 5.1 There exists a security / DOS problem with linuxconf-1.11.r11-rh3/i386 as upgraded from RedHat's FTP site. No other versions have been tested by me. Both the maintainer of linuxco...

resizecons.sh

There is a security hole in RedHat 2.1, which installs the program /usr/bin/resizecons suid root. The resizecons program allows a user to change the videmode of the console. During this process, it runs the program restoretextmode without an absolute pathname, assuming the correct version will be...

wu-ftpd.bof+patch.txt

From: [email protected] mailto:[email protected]. edu On Behalf Of Gregory A Lundberg Sent: Tuesday, March 23, 1999 10:44 AM To: Russ Allbery Cc: [email protected]; [email protected] Subject: Re: FW: ftp exploit On 23 Mar 1999, Russ Allbery wrote: any comments? It's a...

redhat.su.ghost.bug.txt

Date: Wed, 16 Jun 1999 13:47:52 +0200 From: Roman Ramirez Reply-To: [email protected] Organization: Intercomputer, S.A. To: [email protected] Hello: I think I have found some kind of bug in "su" in Redhat linux versions tested on Redhat 5.2 y Redhat 6.0 The problem seems to be when you...

milo-alpha-linux-DoS.txt

Date: Fri, 5 Feb 1999 17:39:53 -0500 From: Dave G. To: [email protected] Subject: KSRT 009: Non Privileged Halt KSRT Security Advisories http://www.ksrt.org [email protected] --- KSRT Advisory 009 Date: Feb. 5th 1999 ID : NonPrivdHALT Affected Program: MILO/Alpha Linux Operating Systems: Linux...

zgv.iopl.txt

Date: Fri, 19 Feb 1999 18:10:00 +0000 From: Chris Evans To: [email protected] Subject: Security hole: "zgv" Overview: "zgv" is an image viewer which runs under SVGAlib at the linux console probably BSD too. It has to be installed suid-root to access graphics hardware. History: "zgv" has a long...

su+pam.redhat.txt

Date: Wed, 9 Jun 1999 14:07:27 -0700 From: Tani Hosokawa To: [email protected] Subject: vulnerability in su/PAM in redhat I was talking to some guy on IRC st2 and he asked me to mention to bugtraq because he's not on the list that the PAMified su that comes with redhat has a slight hole. When...

rxvt.sh

There is a major security hole in rxvt, a terminal emulator for X, when it is run on systems suid root, as is required on many configurations in order to write to the utmp file. It is obvious from the code that this program was not written to be run suid root, its a pity that sysadmins that insta...

samba-wsmbconf.txt

Date: Thu, 19 Nov 1998 18:20:18 +1100 Reply-To: [email protected] Sender: Bugtraq List From: Andrew Tridgell Subject: Vulnerability in Samba on RedHat, Caldera and PHT TurboLinux -----BEGIN PGP SIGNED MESSAGE----- The Samba team has discovered two security vulnerabilities in the samba-1.9.1...

redhat.6.0.pts.permissions.txt

Date: Sun, 6 Jun 1999 19:15:05 +0000 From: noc-wage To: [email protected] Subject: RedHat 6.0, /dev/pts permissions bug when using xterm Once again I've come up with another trivial Denial of Service flaw, wow, I seem to be good at this Conseal Firewall, +++ath0, ppp byte-stuffing It's been a...

pine-bof-10000.txt

Date: Mon, 8 Feb 1999 21:19:29 +0000 From: Chris Evans To: [email protected] Subject: Pine again : Hi, PINE seems to be flavour of the month so I'll add to Michal's post. This is much less serious than Michal's problem but probably noteworthy anyway. PINE can be made to crash if /var/spool/mai...

ftpd.locate.findutils.txt

Date: Fri, 30 Apr 1999 11:07:20 +0300 From: Sergey V. Kolychev To: [email protected] Subject: Buffer overflow in ftpd and locate bug Hi. I had problem with locate from findutils-4.1.24.rpm from Redhat-5.1 It segfaults if we have huge directory at incoming ftp which created by exploits for ftpd...

RedHat Linux 5.2 i386/6.0 - No Logging

source: https://www.securityfocus.com/bid/320/info A vulnerability in PAM allows local malicious users to brute force passwords via the su command without any logging of their activity. su is a command that allows users to change identifies by supplying a password. If the password is correct su...

RedHat Linux 5.1 - xosview

RedHat Linux 5.1 - xosview // source: https://www.securityfocus.com/bid/362/info xosview is an X11 system monitoring application that ships with RedHat 5.1 installed setuid root. A buffer overflow vulnerability was found in Xrm.cc, the offending code listed below: char userrfilename1024;...

RedHat Linux 5.1 - xosview

// source: https://www.securityfocus.com/bid/362/info xosview is an X11 system monitoring application that ships with RedHat 5.1 installed setuid root. A buffer overflow vulnerability was found in Xrm.cc, the offending code listed below: char userrfilename1024; strcpyuserrfilename, getenv"HOME";...

RedHat Linux 5.05.15.2 Slackware Linux 3.5 - klogd Local Buffer Overflow (1)

RedHat Linux 5.05.15.2 Slackware Linux 3.5 - klogd Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because...

RedHat Linux 5.05.15.2 Slackware Linux 3.5 - klogd Local Buffer Overflow (2)

RedHat Linux 5.05.15.2 Slackware Linux 3.5 - klogd Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because...

RedHat Linux 5.0/5.1/5.2 / Slackware Linux 3.5 - 'klogd' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because of a buffer overflow in the klogd handling of kernel messages. It is...

RedHat Linux 5.0/5.1/5.2 / Slackware Linux 3.5 - 'klogd' Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because of a buffer overflow in the klogd handling of kernel messages. It is...

RedHat Linux 5.1 Caldera OpenLinux Standard 1.2 - Mountd

RedHat Linux 5.1 Caldera OpenLinux Standard 1.2 - Mountd // source: https://www.securityfocus.com/bid/121/info NFS servers running certain implementations of mountd, primarily Linux systems. On some systems, the vulnerable NFS server is enabled by default. This vulnerability can be exploited even...