Mandrake Linux Security Advisory : sox (MDKSA-2004:076)

Ulf Harnhammar discovered two buffer overflows in SoX. They occur when the sox or play commands handle malicious .WAV files. Versions 12.17.4, 12.17.3 and 12.17.2 are vulnerable to these overflows. 12.17.1, 12.17 and 12.16 are some versions that are not. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : bind (MDKSA-2002:001)

There are some insecure permissions on configuration files and executables with the bind 9.x packages shipped with Mandrake Linux 8.0 and 8.1. This update provides stricter permissions by making the /etc/rndc.conf and /etc/rndc.key files read/write by the named user and by making /sbin/rndc-confg...

Mandrake Linux Security Advisory : libpng (MDKSA-2004:040)

Steve Grubb discovered that libpng would access memory that is out of bounds when creating an error message. The impact of this bug is not clear, but it could lead to a core dump in a program using libpng, or could result in a DoS Denial of Service condition in a daemon that uses libpng to proces...

Mandrake Linux Security Advisory : mc (MDKSA-2004:007)

A buffer overflow was discovered in mc's virtual filesystem code. This vulnerability could allow remote attackers to execute arbitrary code during symlink conversion. The updated packages have been patched to correct the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Mandrake Linux Security Advisory : lftp (MDKSA-2003:116)

A buffer overflow vulnerability was discovered by Ulf Harnhammar in the lftp FTP client when connecting to a web server using HTTP or HTTPS and using the 'ls' or 'rels' command on specially prepared directory. This vulnerability exists in lftp versions 2.3.0 through 2.6.9 and is corrected upstrea...

Mandrake Linux Security Advisory : stunnel (MDKSA-2002:004)

All versions of stunnel from 3.15 to 3.21c are vulnerable to format string bugs in the functions which implement smtp, pop, and nntp client negotiations. Using stunnel with the '-n service' option and the '-c' client mode option, a malicious server could use the format sting vulnerability to run...

SUSE-SA:2003:025: samba

The remote host is missing a security patch for samba. It is, therefore, affected by a buffer overflow condition in the calltrans2open function within file trans2.c due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via an overly long string...

SUSE-SA:2003:0015: tcpdump

The remote host is missing the patch for the advisory SUSE-SA:2003:0015 tcpdump. The network traffic analyzer tool tcpdump is vulnerable to a denial-of- service condition while parsing ISAKMP or BGP packets. This bug can be exploited remotely by an attacker to stop the use of tcpdump for analyzin...

Solaris 8 (x86) : 111589-06

SunOS 5.8x86: /kernel/drv/wc and /kernel/. Date this patch was last updated by Sun : Feb/08/06 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 105722-07

SunOS 5.6: /usr/lib/fs/ufs/ufsdump and ufsrestore patch. Date this patch was last updated by Sun : Apr/24/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security,...

Solaris 2.6 (x86) : 106126-16

SunOS 5.6x86: Patch for patchadd and patchrm. Date this patch was last updated by Sun : Apr/07/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 7 (sparc) : 107038-02

SunOS 5.7: apropos/catman/man/whatis patch. Date this patch was last updated by Sun : Jun/28/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (sparc) : 104533-05

OpenWindows 3.5.1: OLIT Patch. Date this patch was last updated by Sun : Jul/19/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (x86) : 105723-07

SunOS 5.6x86: /usr/lib/fs/ufs/ufsdump and ufsrestore patch. Date this patch was last updated by Sun : Jun/13/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security...

Solaris 7 (sparc) : 110646-06

SunOS 5.7: /usr/sbin/in.ftpd Patch. Date this patch was last updated by Sun : Dec/20/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 106639-08

SunOS 5.6: rpcmod patch. Date this patch was last updated by Sun : Apr/09/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 2.6 (sparc) : 111560-01

SunOS 5.6: dmesg security problem. Date this patch was last updated by Sun : Jun/19/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (x86) : 112894-01

SunOS 5.6x86: rpc.rwalld has format string problem. Date this patch was last updated by Sun : Jun/17/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. i...

Solaris 2.6 (x86) : 108389-02

SunOS 5.6x86: ptsl driver patch. Date this patch was last updated by Sun : Mar/25/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (x86) : 108894-01

SunOS 5.6x86: patch /usr/lib/netsvc/yp/rpc.ypupdated. Date this patch was last updated by Sun : Aug/21/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc...