Mandrake Linux Security Advisory : ncpfs (MDKSA-2005:028)

Erik Sjolund discovered two vulnerabilities in programs bundled with ncpfs. Due to a flaw in nwclient.c, utilities that use the NetWare client functions insecurely access files with elevated privileges CVE-2005-0013, and there is a potentially exploitable buffer overflow in the ncplogin program...

[SA13992] Sun Solaris DHCP Administration Utilities Vulnerability

TITLE: Sun Solaris DHCP Administration Utilities Vulnerability SECUNIA ADVISORY ID: SA13992 VERIFY ADVISORY: http://secunia.com/advisories/13992/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ DESCRIPTION: A...

MacOS X at scheduling utilities privelege escalation

During execution of user's batch job system groups membership is not dropped...

DEBIAN-CVE-2004-1014

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...

CVE-2004-2376

Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a URL request with a long attfile attribute...

CVE-2004-2380

Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. dot dot in the attfile parameter...

CVE-2004-1295

CVE-2004-1295 affects uml-utilities (uml_net, 20030903) where slip_down in slip.c does not verify caller permissions when uml_net is installed setuid root. This permits local users to cause a denial of service by disabling an interface. The available sources (NVD entry, CVE records) confirm the v...

CVE-2004-1295: Undefined Security Weakness

The slipdown function in slip.c for the umlnet program in uml-utilities 20030903, when umlnet is installed setuid root, does not verify whether the calling user has sufficient permission to disable an interface, which allows local users to cause a denial of service network service disabled...

security flaw

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...

Important: Red Hat Security Advisory: nfs-utils security update

An updated nfs-utils package that fixes various security issues is now available. The nfs-utils package provides a daemon for the kernel NFS server and related tools, providing a much higher level of performance than the traditional Linux NFS server used by most users. This package also contains...

UML_Utilities User-Mode Linux - uml_utilities 20030903 UML_Net Slip Network Interface Denial of Service

source: https://www.securityfocus.com/bid/12016/info The umlutilites umlnet application may permit unprivileged malicious local users to shut down the slip network interface. This is due to the program being installed setuid root by default. This vulnerability could be exploited to deny network...

ncpfs: Buffer overflow in ncplogin and ncpmap

Background ncpfs is a NCP protocol network filesystem that allows access to Netware services, for example to mount volumes of NetWare servers or print to NetWare print queues. Description Karol Wiesek discovered a buffer overflow in the handling of the '-T' option in the ncplogin and ncpmap...

TC-IDE unfiltered shell characters problem

Shell characters filtering problem on external program execution in multiple utilities...

shadow: Unauthorized modification of account information

Background shadow provides a set of utilities to deal with user accounts. Description Martin Schulze reported a flaw in the passwdcheck function in "libmisc/pwdcheck.c" which is used by chfn and chsh. Impact A logged-in local user with an expired password may be able to use chfn and chsh to chang...

NetKit-telnetd: buffer overflows in telnet and telnetd

Background NetKit-telnetd is a standard Linux telnet client and server from the NetKit utilities. Description A possible buffer overflow exists in the parsing of option strings by the telnet daemon, where proper bounds checking is not applied when writing to a buffer. Additionaly, another possibl...

Netpbm: Multiple temporary file issues

Background Netpbm is a toolkit containing more than 200 separate utilities for manipulation and conversion of graphic images. Description Utilities contained in the Netpbm package prior to the 9.25 version contain defects in temporary file handling. They create temporary files with predictable...

Debian DSA-283-1 : xfsdump - insecure file creation

Ethan Benson discovered a problem in xfsdump, that contains administrative utilities for the XFS filesystem. When filesystem quotas are enabled xfsdump runs xfsdq to save the quota information into a file at the root of the filesystem being dumped. The manner in which this file is created is...

QNX Photon input-cfg - '-s' Overflow

source: https://www.securityfocus.com/bid/11164/info Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finit...

Solaris 9 (x86) : 114568-29

SunOS 5.9x86: pkg utilities Patch. Date this patch was last updated by Sun : Apr/05/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

RHEL 2.1 : fileutils (RHSA-2003:016)

Updated fileutils packages are available which fix a race condition in recursive remove and move commands. The fileutils package includes a number of GNU versions of common and popular file management utilities. A race condition in recursive use of rm and mv commands in fileutils 4.1 and earlier...