Linux User Account Activity Create User (via Splunk): audit (USER_MGMT)

Binary data 710045.prm...

Linux User Account Activity Delete User (via Splunk): audit (DEL_USER, deleting user entries)

Binary data 710039.prm...

Linux User Account Activity Add User to Group (via Splunk): audit (USER_CHAUTHTOK)

Binary data 710029.prm...

Linux User Account Activity Add User to Group (via Splunk): audit (USER_MGMT)

Binary data 710013.prm...

Linux User Account Activity Delete User (via Splunk): audit (DEL_USER, not found)

Binary data 710034.prm...

Mandrake Linux Security Advisory : xinetd (MDKSA-2001:076)

An audit has been performed on the xinetd 2.3.0 source code by Solar Designer for many different possible vulnerabilities. The 2.3.1 release incorporated his patches into the xinetd source tree. The audit was very thorough and found and fixed many problems. This xinetd update includes his audit...

Fedora Core 1 : cvs-1.11.17-1 (2004-169)

While investigating a previously fixed vulnerability, Derek Price discovered a flaw relating to malformed 'Entry' lines which lead to a missing NULL terminator. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0414 to this issue. Stefan Esser and...

Fedora Core 2 : cvs-1.11.17-2 (2004-170)

While investigating a previously fixed vulnerability, Derek Price discovered a flaw relating to malformed 'Entry' lines which lead to a missing NULL terminator. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0414 to this issue. Stefan Esser and...

Potential Buffer Overrun in smbd

Description A buffer overrun has been located in the code used to support the 'mangling method = hash' smb.conf option. Please be aware that the default setting for this parameter is 'mangling method = hash2' and therefore not vulnerable. Affected Samba 3 installations can avoid this possible...

RHEL 2.1 : sendmail (RHSA-2003:074)

Updated Sendmail packages are available to fix a vulnerability that may allow remote attackers to gain root privileges by sending a carefully crafted message. Updated March 18 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS. Sendmail is a widely used Mail...

[UNIX] Linux Virtual Server/Secure Context Procfs Shared Permissions Flaw

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[UNIX] Chora CVS/SVN Viewer Remote Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

PerlBill Multiple Vulnerabilities

I was doing a small little security audit on a friends hosting website and noticed he was using PerlBill. Stated on PerlBill.com, "PerlBill is a client management solution for companies selling on the Internet. Using PerlBill you can manage orders, clients and client support efficiently. Our...

Multiple OpenSSL DoS bugs

Few bugs patched during product audit...

DSA-447 hsftp - format string

Bulletin has no description...

[SECURITY] [DSA 446-1] New synaesthesia packages fix insecure file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 446-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 21st, 2004 http://www.debian.org/security/faq -...

DSA-445 lbreakout2 - buffer overflow

Bulletin has no description...

CVE-2005-1247

webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability...

IBM Directory Server 4.1 Web Admin Gui (ldacgi.exe) XSS Vulnerability

IBM Directory Server 4.1 Web Admin Gui ldacgi.exe XSS Vulnerability ===================================================================== During the audit of 3rd party product, based on IBM Directory Server, i found a cross site scripting vulnerability on IBM's Directory Server 4.1 Web Admin Gui...

Multiple bugzilla bugs

Multiple bugs are fixed during audit...