Mandrake Linux Security Advisory : openssl (MDKSA-2001:065)

The pseudo-random number generator in OpenSSL versions up to 0.9.6a has a design flaw. By knowing the output of specific PRNG requests, an attacker would be able to determine the PRNG's internal state and thus predict future PRNG output. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandrake Linux Security Advisory : postfix (MDKSA-2001:089)

Wietse Venema, the author of postfix, reported a vulnerability in the SMTP server where a remote attacker could execute a Denial of Service attack on it. The SMTP session log could grow to an unreasonable size and could possibly exhause the server's memory if no other limits were enforced...

Mandrake Linux Security Advisory : squid (MDKSA-2001:066)

The Squid proxy server has a serious security flaw in versions 2.3.STABLE2 through 2.3.STABLE4. This problem surfaces when Squid is used in httpdaccel mode. If you configure httpaccelwithproxy off then any request to Squid is allowed. Malicious users may use your proxy to portscan remote systems,...

Mandrake Linux Security Advisory : gftp (MDKSA-2001:044)

A format string vulnerability exists in all versions of gftp prior to version 2.0.8. This vulnerability has been fixed upstream in version 2.0.8. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security...

Mandrake Linux Security Advisory : irssi (MDKSA-2003:117)

A vulnerability in versions of irssi prior to 0.8.9 would allow a remote user to crash another user's irssi client provided that the client was on a non-x86 architecture or if the 'gui print text' signal is being used by some script or plugin. The updated packages provide 0.8.9 which corrects the...

Mandrake Linux Security Advisory : ksymoops (MDKSA-2004:060)

Geoffrey Lee discovered a problem with the ksymoops-gznm script distributed with Mandrakelinux. The script fails to do proper checking when copying a file to the /tmp directory. Because of this, a local attacker can setup a symlink to point to a file that they do not have permission to remove. Th...

Mandrake Linux Security Advisory : libpng (MDKSA-2004:040)

Steve Grubb discovered that libpng would access memory that is out of bounds when creating an error message. The impact of this bug is not clear, but it could lead to a core dump in a program using libpng, or could result in a DoS Denial of Service condition in a daemon that uses libpng to proces...

SUSE-SA:2003:0015: tcpdump

The remote host is missing the patch for the advisory SUSE-SA:2003:0015 tcpdump. The network traffic analyzer tool tcpdump is vulnerable to a denial-of- service condition while parsing ISAKMP or BGP packets. This bug can be exploited remotely by an attacker to stop the use of tcpdump for analyzin...

SUSE-SA:2003:025: samba

The remote host is missing a security patch for samba. It is, therefore, affected by a buffer overflow condition in the calltrans2open function within file trans2.c due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via an overly long string...

Solaris 2.6 (sparc) : 105722-07

SunOS 5.6: /usr/lib/fs/ufs/ufsdump and ufsrestore patch. Date this patch was last updated by Sun : Apr/24/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security,...

Solaris 7 (sparc) : 107589-13

SunOS 5.7: se, zs, kbd and kbio.h Patch. Date this patch was last updated by Sun : Jul/31/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (x86) : 103744-01

SunOS 5.5.1x86: XFN source modifications for BIND 4.9.3. Date this patch was last updated by Sun : Jul/25/96 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security,...

Solaris 7 (sparc) : 108162-08

SunOS 5.7: jsh, rsh, ksh, rksh, sh Patch. Date this patch was last updated by Sun : Feb/26/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 7 (sparc) : 110646-06

SunOS 5.7: /usr/sbin/in.ftpd Patch. Date this patch was last updated by Sun : Dec/20/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (x86) : 104638-04

SunOS 5.5.1x86: /usr/ccs/lib/libcurses.a patch. Date this patch was last updated by Sun : Mar/09/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (x86) : 107775-01

SunOS 5.6x86: inetd denial-of-service attack. Date this patch was last updated by Sun : Jun/08/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 111560-01

SunOS 5.6: dmesg security problem. Date this patch was last updated by Sun : Jun/19/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 106639-08

SunOS 5.6: rpcmod patch. Date this patch was last updated by Sun : Apr/09/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 2.6 (x86) : 112894-01

SunOS 5.6x86: rpc.rwalld has format string problem. Date this patch was last updated by Sun : Jun/17/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. i...

Solaris 2.6 (x86) : 105723-07

SunOS 5.6x86: /usr/lib/fs/ufs/ufsdump and ufsrestore patch. Date this patch was last updated by Sun : Jun/13/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security...