Samba-TNG 0.3.1 Security Release (fwd)

---------- Forwarded message ---------- Date: Sat, 22 Mar 2003 21:03:11 +0100 CET From: Stephan Lauffer [email protected] To: [email protected] Subject: ANNOUNCE Samba-TNG 0.3.1 Security Release Samba-TNG-0.3.1 released ========================== Mar 22th 2003 Today the...

Moderate: Red Hat Security Advisory: file security update

Updated file packages are available to close a buffer overflow vulnerability. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS The file command is used to identify a particular file according to the type of data contained by the file. The file...

MIT Kerberos V5 KDC logging routines use unsafe format strings

Overview Early releases of the MIT Kerberos V5 KDC contain format string vulnerabilities that can be used by unauthenticated remote attackers to conduct denial of service attacks on KDC servers. Description Logging routines in some unspecified versions of the MIT Kerberos V5 Key Distribution Cent...

[SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 226-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 226-1] New xpdf-i packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 226-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 223-1] New geneweb packages fix information exposure

-------------------------------------------------------------------------- Debian Security Advisory DSA 223-1 [email protected] http://www.debian.org/security/ Martin Schulze January 7th, 2003 http://www.debian.org/security/faq -...

DSA-217 typespeed - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 176-1] New gv packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 176-1 [email protected] http://www.debian.org/security/ Martin Schulze October 16th, 2002 http://www.debian.org/security/faq -...

MIT Kerberos V5 KDC vulnerable to denial-of-service via null pointer dereference

Overview A vulnerability exists in MIT Kerberos V5 Key Distribution Center that may allow attackers to crash multiple KDC servers within the same realm. Description The MIT Kerberos V5 Key Distribution Center KDC contains a vulnerability that allows certain protocol requests to crash the KDC by...

[SECURITY] [DSA 143-1] New krb5 packages fix integer overflow bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 143-1 [email protected] http://www.debian.org/security/ Martin Schulze August 5th, 2002 - -------------------------------------------------------------------------- Package : krb5...

[SECURITY] [DSA-130-1] memory allocation error in ethereal

Package: ethereal Vulnerability: remotely triggered memory allocation error Debian-specific: no Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal...

Typsoft FTP Server: yet another directory traversal vulnerability

Method: simple directory traversal Risk: Medium Website: www.typsoft.com updated version available Hello All versions of TYPSoft FTP Server 0.97.1 and previous, but not tested are vulnerable to another directory traversal vulnerability than the one already published on BugTraq. A directory...

Important: Red Hat Security Advisory: : Updated 2.4 kernel available

The Linux Netfilter team has found a problem in the "IRC connection tracking" component of the firewall within the linux kernel. This problem affects Red Hat Linux versions 7.1 and 7.2. The Linux Netfilter team has found a problem in the IRC connection tracking component of the firewall within th...

Netscreen: DMZ Network Receives Some "Denied" Traffic

Dear NetScreen Customer: This is an important NetScreen Security Advisory. ------------------------------------------------------------------------------- ------------------------------ DMZ Network Receives Some "Denied" Traffic...

Vulnerability in Soft Lite ServerWorx

----- Begin Hush Signed Message from [email protected] ----- Vulnerability in Soft Lite ServerWorx Overview Soft Lite ServerWorx v3.00 is a web server available from http://www.zdnet.com and http://www.softlite.net. A vulnerability exists which allows a remote user to break out of the web roo...

[SECURITY] [DSA-004-1] nano symlink attack

Package : nano Problem type : symlink attack Debian-specific: no The problem that was previously reported for joe also occurs with other editors. When nano a free pico clone unexpectedly dies it tries a warning message to a new file with a predictable name the name of the file being edited with...

BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC12

================================================================ BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC12 05/09/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================ Problem: "Magic cookie" C devulge...

[SECURITY] New Debian nfs-common packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz July 15, 2000 - ---------------------------------------------------------------------------- Package: nfs-common from...

[SECURITY] New version of splitvt released (update)

Package: splitvt Vulnerability: local root exploit Debian-specific: no This is an update to the previous splitvt advisory. The previous release had incorrrect addresses for the updates for Debian GNU/Linux potato. The version of splitvt distributed in Debian GNU/Linux 2.1 a.k.a. slink, as well as...

[SECURITY] New version of sendmail released

The version of sendmail that was distributed with Debian GNU/Linux 2.1 has a slight problem in the code to regenerate the aliases database. Sendmail allowed any user to run sendmail with the -bi option to reinitialize the aliases database. The user could then interrupt sendmail and leave the syst...