Linux news 19.09.00

Linux 2.2.18pre9 Alan Cox выпустил новую pre-версию следующего стабильного ядра Linux: 2.2.18pre9. В этой версии была поправлена поддержка NFS и была добавлена поддержка NFSv3, перенесены некоторые USB драйвера из Linux 2.4 и др. Подробнее:...

FreeBSD-SA-00:37.cvsweb

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:37 Security Advisory FreeBSD, Inc. Topic: cvsweb allows increased access to CVS committers Category: ports Module: cvsweb Announced: 2000-08-14 Credits: Joey Hess Affects...

cvs security problem

I found two security problems in cvs-1.10.8. 1 A committer can execute any binary in server using CVS/Checkin.prog or CVS/Update.prog. A committer can execute arbitrary binary on a cvs server using Checkin.prog. Usually CVS/Checkin.prog in a working directory is copied from CVSROOT/modules when t...

Дырка в cvs

отдельные пользователи могут выполнять приложения с правами cvs-сервера...

cvs-1.10.8.txt

I found two security problems in cvs-1.10.8. 1 A committer can execute any binary in server using CVS/Checkin.prog or CVS/Update.prog. A committer can execute arbitrary binary on a cvs server using Checkin.prog. Usually CVS/Checkin.prog in a working directory is copied from CVSROOT/modules when t...

CVS Kit CVS Server 1.10.8 - Instructed File Create

source: https://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be tested yourself as follows. Although this example ru...

CVS Kit CVS Server 1.10.8 - Instructed File Create

CVS Kit CVS Server 1.10.8 - Instructed File Create source: https://www.securityfocus.com/bid/1523/info The cvs client blindly trust paths returned to it by the server. Therefore, a cvs client could be tricked into creating a file anywhere on the system by a malicious server. This problem can be...

CVSWeb Developer CVSWeb 1.80 - Insecure Perl open Code Execution

CVSWeb Developer CVSWeb 1.80 - Insecure Perl open Code Execution source: https://www.securityfocus.com/bid/1469/info Cvsweb 1.80 makes an insecure call to the perl OPEN function, providing attackers with write access to a cvs repository the ability to execute arbitrary commands on the host machin...

CVS Kit CVS Server 1.10.8 - Checkin.prog Binary Execution

CVS Kit CVS Server 1.10.8 - Checkin.prog Binary Execution source: https://www.securityfocus.com/bid/1524/info A CVS committer can execute arbitrary binaries by using Checkin.prog. Usually CVS/Checkin.prog in a working directory is copied from CVSROOT/modules when the directory is "checkout"ed and...

CVS Kit CVS Server 1.10.8 - 'Checkin.prog' Binary Execution

source: https://www.securityfocus.com/bid/1524/info A CVS committer can execute arbitrary binaries by using Checkin.prog. Usually CVS/Checkin.prog in a working directory is copied from CVSROOT/modules when the directory is "checkout"ed and it is sent back to the server and executed with committin...

CVS DoS

Hi, I've just found annoying bug in cvs-1.10.7 probably others too. Let's assume you've decided to make your remote cvs repository available to several trusted people. Therefore you need to edit your /etc/inetd.conf file and add line similar to presented below: cvspserver stream tcp nowait root...

CVS 1.10.7 - Local Denial of Service

CVS 1.10.7 - Local Denial of Service source: https://www.securityfocus.com/bid/1136/info CVS stands for Concurrent Versions Software and is an open-source package designed to allow multiple developers to work concurrently on a single source tree, recording changes and controlling versions. It is...

CVS 1.10.7 - Local Denial of Service

source: https://www.securityfocus.com/bid/1136/info CVS stands for Concurrent Versions Software and is an open-source package designed to allow multiple developers to work concurrently on a single source tree, recording changes and controlling versions. It is possible to cause a denial of service...

CVS pserver Detection

Concurrent Versions System CVS, an open source versioning system, is running on the remote port. The CVS server can be accessed either using third-party tools e.g., RSH or SSH or via the 'pserver' protocol, which is unencrypted. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-1999-0044

The vulnerability CVE-1999-0044 affects the fsdump command in IRIX, enabling a local user to obtain root access by modifying sensitive files. The connected sources reiterate this description but do not provide specific affected IRIX versions, root-causes details, or a published fix. No remediatio...