248 matches found
Mandriva Update for imap MDKA-2007:083 (imap)
Check for the Version of imap OpenVAS Vulnerability Test Mandriva Update for imap MDKA-2007:083 imap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
[SECURITY] Fedora 8 Update: proftpd-1.3.1-8.fc8
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
[SECURITY] Fedora 10 Update: proftpd-1.3.1-8.fc10
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
[SECURITY] Fedora 9 Update: proftpd-1.3.1-8.fc9
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
Debian Security Advisory DSA 151-1 (xinetd)
The remote host is missing an update to xinetd announced via advisory DSA 151-1. OpenVAS Vulnerability Test $Id: deb1511.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 151-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 063-1 (xinetd)
The remote host is missing an update to xinetd announced via advisory DSA 063-1. OpenVAS Vulnerability Test $Id: deb0631.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 063-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 063-1 (xinetd)
The remote host is missing an update to xinetd announced via advisory DSA 063-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-151)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 7 Update: proftpd-1.3.1-2.fc7
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
MDKA-2007:083 : imap
Due to the configuration of the xinetd configuration files included in the imap package, initial connections to the IMAP and/or POP3 services would have a substantial delay due to xinetd attempting to perform ident lookups. This update has corrected xinetd configuration files that remove the iden...
MDKA-2006:044 : xinetd
The initscript for xinetd incorrectly set the locale to enUS. If the locales-en package is not installed on the system, some xinetd services may not work properly. This was first noted with the svnserve program from subversion. This has been fixed in the updated packages, which set the locale to ...
xinetd -- ignores user and group directives for TCPMUX services
xinetd would execute configured TCPMUX services without dropping privilege to match the service configuration allowing the service to run with same privilege as the xinetd process root...
Debian DSA-151-1 : xinetd - pipe exposure
Solar Designer found a vulnerability in xinetd, a replacement for the BSD derived inetd. File descriptors for the signal pipe introduced in version 2.3.4 are leaked into services started from xinetd. The descriptors could be used to talk to xinetd resulting in crashing it entirely. This is usuall...
Debian DSA-063-1 : xinetd - change default umask
zen-parse reported on bugtraq that there is a possible buffer overflow in the logging code from xinetd. This could be triggered by using a fake identd that returns special replies when xinetd does an ident request. Another problem is that xinetd sets it umask to 0. As a result any programs that...
CVE-2001-0825
Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check...
CVE-2001-0825
The CVE-2001-0825 entry concerns xinetd prior to 2.1.8.8, where a buffer overflow in internal string handling routines enables remote command execution. The vulnerability stems from a length argument of zero or less, which disables the length check and may allow an attacker to run arbitrary comma...
Mandrake Linux Security Advisory : xinetd (MDKSA-2001:055-1)
A bug exists in xinetd as shipped with Mandrake Linux 8.0 dealing with TCP connections with the WAIT state that prevents linuxconf-web from working properly. As well, xinetd contains a security flaw in which it defaults to a umask of 0. This means that applications using the xinetd umask that do...
Mandrake Linux Security Advisory : xinetd (MDKSA-2003:056)
A vulnerability was discovered in xinetd where memory was allocated and never freed if a connection was refused for any reason. Because of this bug, an attacker could crash the xinetd server, making unavailable all of the services it controls. Other flaws were also discovered that could cause...
Mandrake Linux Security Advisory : xinetd (MDKSA-2001:076)
An audit has been performed on the xinetd 2.3.0 source code by Solar Designer for many different possible vulnerabilities. The 2.3.1 release incorporated his patches into the xinetd source tree. The audit was very thorough and found and fixed many problems. This xinetd update includes his audit...
RHEL 2.1 : xinetd (RHSA-2003:161)
Updated xinetd packages fix a security vulnerability and other bugs. Xinetd is a master server that is used to to accept service connection requests and start the appropriate servers. Because of a programming error, memory was allocated and never freed if a connection was refused for any reason. ...