Security fix for the ALT Linux 10 package apache2 version 2.0.40-9

Oct. 2, 2002 Joe Orton &[email protected] 2.0.40-9 - security fixes for CAN-2002-0840 and CAN-2002-0843 - fix for possible moddav segfault for certain requests...

wwwoffle-2.7b and prior segfaults with negative Content-Length value

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 QITEST1 SECURITY ADVISORY 005 wwwoffle-2.7b and prior segfaults with negative Content-Length value PROGRAM DESCRIPTION WWWOFFLE, World Wide Web Offline Explorer, is a proxy HTTP/FTP server for computers with dial-up internet access. DETAILS When...

traceroute-4.4BSD (slack) heap overflow

Hi, A while ago I was studying the source code for this traceroute... I found this in the inetname function: ... static char line50; ... if cp void strcpyline, cp; else ... The cp variable holds at that point the hostname for the current host it's tracing. If the hostname is something like a litt...

format string in ssl dump

Sorry if this has already got posted. Seeweed found this in ssldump the other day. The follwoing text is from his website http://dropwire.dhs.org/seeweed/: SSLDUMP is a program witch is simallar to tcpdump, but also adds encryption to its network debugging procedures..It captures traffic then...

BitchX /ignore bug

I don't know whether this is the right place to put it, but i'm going to anyway : Because of a simple /invite nickname sssssssss, BitchX will segfault and coredump. This is a small programming error, you can find a patch at this location: http://root66.org/karin/BitchX-bug-patch-3-juli-2000.tar.g...

2.2.12.execve.txt

From: [email protected] Subject: execve bug linux-2.2.12 While doing some debugging, I discovered a really nasty stack smash bug in linux-2.2.12. The I haven't checked previous versions of the 2.2 kernel but bug appears to be fixed in linux-2.2.13pre17. If I am reading this correctly, the...