Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in Red Hat Enterprise Linux 3 are now available. The Linux kernel handles the basic functions of the operating system. This advisory includes fixes for several security issues: iSEC Security Research discovered a VMA handling flaw in the...

DSA-643-1 queue - buffer overflows

Bulletin has no description...

DSA-622-1 htmlheadline - insecure temporary files

Bulletin has no description...

DSA-592-1 ez-ipupdate - format string

Bulletin has no description...

Re: debian dhcpd, old format string bug

[email protected] wrote: On Thu, 28 Oct 2004 10:31:38 +1000 Tarragon Allen [email protected] wrote: On Tuesday 26 October 2004 10:37, [email protected] wrote: Firstly, good etiquette would have been for you to actually report the bug with Debian. I don't see any bugs raised agains...

PostgreSQL make_oidjoins_check Arbitrary File Overwrite

The remote PostgreSQL server, according to its version number, is vulnerable to an unspecified insecure temporary file creation flaw, which may allow a local attacker to overwrite arbitrary files with the privileges of the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian DSA-136-1 : openssl - multiple remote exploits

The OpenSSL development team has announced that a security audit by A.L. Digital Ltd and The Bunker, under the DARPA CHATS program, has revealed remotely exploitable buffer overflow conditions in the OpenSSL code. Additionally, the ASN1 parser in OpenSSL has a potential DoS attack independently...

Fedora Core 1 : gtk2-2.2.4-10 (2004-288)

During testing of a previously fixed flaw in Qt CVE-2004-0691, a flaw was discovered in the BMP image processor of gtk2. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by a...

Important: Red Hat Security Advisory: qt security update

Updated qt packages that fix security issues in several of the image decoders are now available. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. During a security audit, Chris Evans discovered a heap...

Linux User Account Activity Change Password (via Splunk): audit (changing password)

Binary data 710031.prm...

Linux Service Modification Service Start (via Splunk): audit (SERVICE_START)

Binary data 710020.prm...

Linux User Account Activity Delete User (via Splunk): audit (DEL_USER, plain)

Binary data 710033.prm...

Linux User Account Activity Add User to Group (via Splunk): audit (USER_MGMT)

Binary data 710013.prm...

Linux User Account Activity Create User (via Splunk): audit (ADD_USER)

Binary data 710037.prm...

Linux User Account Activity Remove User from Group (via Splunk): audit (USER_ACCT)

Binary data 710030.prm...

Linux User Account Activity Delete User (via Splunk): audit (DEL_USER, deleting user entries)

Binary data 710039.prm...

Linux User Account Activity Add User to Group (via Splunk): audit (USER_CHAUTHTOK)

Binary data 710029.prm...

Linux User Account Activity Delete User (via Splunk): audit (DEL_USER, not found)

Binary data 710034.prm...

Linux User Account Activity Create User (via Splunk): audit (USER_MGMT)

Binary data 710045.prm...

Mandrake Linux Security Advisory : xinetd (MDKSA-2001:076)

An audit has been performed on the xinetd 2.3.0 source code by Solar Designer for many different possible vulnerabilities. The 2.3.1 release incorporated his patches into the xinetd source tree. The audit was very thorough and found and fixed many problems. This xinetd update includes his audit...