[SECURITY] [DSA-074-1] buffer overflow in Window Maker

Package : wmaker Problem type : buffer overflow Debian-specific: no Alban Hertroys found a buffer overflow in Window Maker a popular window manager for X. The code that handles titles in the window list menu did not check the length of the title when copying it to a buffer. Since applications wil...

[SECURITY] [DSA-070-1] netkit-telnet AYT buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-070-1 [email protected] http://www.debian.org/security/ Robert van der Meulen August 10, 2001 - ------------------------------------------------------------------------ Package : netkit-telnet...

[SECURITY] [DSA-046-1] exuberant-ctags uses insecure temporary files

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-046-1 [email protected] http://www.debian.org/security/ Wichert Akkerman April 15, 2001 -...

CVE-1999-0732

The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links...

[SECURITY] New versions of smtp-refuser fixes security hole

This bug was experienced in May 1999 but wasnt reported on this channel yet. Former versions of the smtp-refuser package came with unchecked logging facility to /tmp/log. This allowed deleting arbitrary, root-owned files by any user who has write access to /tmp. We recommend you upgrade your...

cfengine.symlink.txt

Date: Tue, 16 Feb 1999 01:12:20 +0100 From: Wichert Akkerman To: [email protected] Subject: SECURITY New versions of cfengine fixes symlink attack -----BEGIN PGP SIGNED MESSAGE----- The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files wh...

PT-1999-1308 · Debian · Man-Db

Name of the Vulnerable Software and Affected Versions: man-db affected versions not specified Description: The issue allows local users to overwrite files via a symlink attack using the zsoelim program in the Debian man-db package. Recommendations: At the moment, there is no information about a...

[SECURITY] Seyon is vulnerable to a root exploit

Description We have received a report from SGI that a vulnerability has been discovered in the seyon program. This can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. Since SGI does not provide exploit information, we are unable to fix the...