Format string bugs in heartbeat

Few format strings potentially can lead to remote root compromise UDP/694...

[SECURITY] [DSA 171-1] New fetchmail packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 171-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2002 http://www.debian.org/security/faq -...

NetBSD Security Advisory 2002-022: buffer overrun in pic(1)

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-022 ================================= Topic: buffer overrun in pic1 Version: NetBSD-current: source prior to September 28, 2002 NetBSD 1.6: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected NetBSD-1.5.1: affected NetBSD-1.5:...

NetBSD Security Advisory 2002-019: Buffer overrun in talkd

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-019 ================================= Topic: Buffer overrun in talkd Version: NetBSD-current: source prior to September 20, 2002 NetBSD 1.6: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected NetBSD-1.5.1: affected NetBSD-1.5:...

Sun Solaris asppls(1M) vulnerable to arbitrary file overwriting via symlink redirection of temporary file

Overview Sun Solaris asppls1M creates temporary files insecurely, leading to possible local root compromise. Description Sun Microsystems describes the function of asppls1M as follows:aspppd is the link manager for the asynchronous data link protocol specified in RFC1331, The Point-to-Point...

Interbase 5/6 - GDS_Lock_MGR UMask File Permission Changing

// source: https://www.securityfocus.com/bid/5805/info Interbase is a SQL database distributed and maintained by Borland. It is available for Unix and Linux operating systems. The gdslockmgr program within Interbase is typically installed setuid. This program does not properly handle user-supplie...

NetBSD Security Advisory 2002-014: fd_set overrun in mbone tools and pppd

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-014 ================================= Topic: fdset overrun in mbone tools and pppd Version: NetBSD-current: source prior to August 10, 2002 NetBSD 1.6 beta: sources prior to August 11, 2002 NetBSD-1.5.3: affected NetBSD-1.5.2:...

pwc.20020630.nims_modweb.b

PricewaterhouseCoopers Security Vulnerability Report No: pwc.20020630.nimsmodweb.b ==================================================== Vulnerability Summary --------------------- Problem: Multiple buffer overflow conditions have been identified in Novell Netmail. Threat: Remote root compromise...

SGI IRIX contains vulnerability in rpc.passwd allowing for root compromise

Overview There is a vulnerability in rpc.passwd that could allow root compromise. Description /usr/etc/rpc.passwd, part of the nfs.sw.nis subsystem on IRIX 6.5, could permit a root compromise. No other details are available. --- Impact Intruders could gain root access. --- Solution Apply a patch ...

MacOS X SoftwareUpdate Vulnerability

---------------------------------------------------------------------------- MacOS X SoftwareUpdate Vulnerability. ---------------------------------------------------------------------------- Date: July 6, 2002 Version: MacOS 10.1.X and possibly 10.0.X Problem: MacOS X SoftwareUpdate connects to...

IRIX rpc.passwd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: rpc.passwd vulnerability Number: 20020601-01-P Date: June 4, 2002 Reference: CAN-2002-0357 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that /usr/etc/rpc.passwd has a vulnerability...

Multiple bugs in Solaris utils

Local and remoter root compromise via buffer overflows and remote DoS attacks...

IRIX cpr vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX cpr vulnerability Number: 20020409-01-I Date: April 30, 2002 Reference: CAN-2002-0173 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that there is a potential buffer overflow...

IRIX nsd symlink vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX nsd symlink vulnerability Number: 20020501-01-I Date: May 1, 2002 Reference: CAN-2002-0174 - ----------------------- - --- Issue Specifics --- - ----------------------- It has been reported that nsd was not checking the...

Apple Mac OSX 10.x / FreeBSD 4.x / OpenBSD 2.x / Solaris 2.5/2.6/7.0/8 - 'exec C Library' Standard I/O File Descriptor Closure

/ source: https://www.securityfocus.com/bid/4568/info It has been reported that BSD-based kernels do not check to ensure that the C library standard I/O file descriptors 0-2 are valid open files before execing setuid images. Consequently, I/O that are opened by a setuid process may be assigned fi...

Apple Mac OSX 10.x FreeBSD 4.x OpenBSD 2.x Solaris 2.52.67.08 - exec C Library Standard IO File Descriptor Closure

Apple Mac OSX 10.x FreeBSD 4.x OpenBSD 2.x Solaris 2.52.67.08 - exec C Library Standard IO File Descriptor Closure / source: https://www.securityfocus.com/bid/4568/info It has been reported that BSD-based kernels do not check to ensure that the C library standard I/O file descriptors 0-2 are vali...

Vulnerability in HP Photosmart/Deskjet Drivers for Mac OS X (root compromise)

Hello everyone, after some frustration with the HP Photosmart printer driver not being as smart as the name suggests and HP support not as suppor- tive as I would wish about the issues raised below, I've decided to bring the following multiple security vulnerabilities of the HP Photosmart/Deskjet...

Etnus TotalView 5.

Program: Etnus TotalView Version: 5.0.0-4 DESCRIPTION ----------- TotalView is a multiprocess source-level debugger for programs written in the C, C++, and Fortran programming languages. TotalView is part of a suite of programming tools from Etnus, LLC. PROBLEM ------- Failed to install the files...

Ecartis/Listar multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: Ecartis / Listar Version: read the details Vendor: The Ecartis Project. http://www.ecartis.org/ Author: Janusz Niewiadomski [email protected], Wojciech Purczynski [email protected] Date: March 10, 2002 Issue: ====== Multiple buffer overflow...

[NGSEC-2002-1] Ettercap, remote root compromise

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Next Generation Security Technologies http://www.ngsec.com Security Advisory Title: Ettercap, remote root compromise ID: NGSEC-2002-1 Application: ettercap 0.6.3.1 and older http://ettercap.sourceforge.net Date: 05/02/2002 Status: Vendor Contacted, ne...