[SECURITY] [DSA-016-3] Correction: New version of wu-ftpd released

---------------------------------------------------------------------------- Debian Security Advisory DSA-016-3 [email protected] http://www.debian.org/security/ Martin Schulze January 24, 2001 - ---------------------------------------------------------------------------- Package : wu-ftpd...

Дырка в sash в Debian

При копировании /etc/shadow создаются файлы открытые на чтение...

[SECURITY] [DSA-015-1] New version of sash released

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-015-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 -...

[SECURITY] [DSA-012-1] New version of micq released

---------------------------------------------------------------------------- Debian Security Advisory DSA-012-1 [email protected] http://www.debian.org/security/ Martin Schulze January 22, 2001 - ---------------------------------------------------------------------------- Package : micq...

[SECURITY] [DSA-009-1] multiple stunnel vulnerabilities

Package : stunnel Problem type : insecure file handling, format string bug Debian-specific: no Lez discovered a format string problem in stunnel a tool to create Universal SSL tunnel for other network daemons. Brian Hatch responded by stating he was already preparing a new release with multiple...

[SECURITY] [DSA-005-1] slocate local exploit

Package : slocate Problem type : local exploit Debian-specific: no Michel Kaempf reported a security problem in slocate a secure version of locate, a tool to quickly locate files on a filesystem on bugtraq which was originally discovered by zorgon. He discovered there was a bug in the database...

[SECURITY] [DSA-004-1] nano symlink attack

Package : nano Problem type : symlink attack Debian-specific: no The problem that was previously reported for joe also occurs with other editors. When nano a free pico clone unexpectedly dies it tries a warning message to a new file with a predictable name the name of the file being edited with...

[SECURITY] [DSA-001-1] ed symlink attack

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory 001-1 [email protected] http://www.debian.org/security/ Wichert Akkerman November 29, 2000 -...

[SECURITY] No koules vulnerability

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze November 22, 2000 - ------------------------------------------------------------------------ Package : koules Problem type : local...

[SECURITY] New version of joe released

Package : joe Problem type : symlink attack Debian-specific: no When joe Joes Own Editor dies due to a signal instead of a normal exit it saves a list of the files it is editing to a file called DEADJOE in its current directory. Unfortunately this wasnt done safely which made joe vulnerable to a...

[SECURITY] No koules vulnerability

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze November 22, 2000 - ------------------------------------------------------------------------ Package : koules Problem type : local...

[SECURITY] New version of modutils released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze November 22, 2000 - ------------------------------------------------------------------------ Package : modutils Problem type : local...

[SECURITY] New version of ethereal released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 22, 2000 - ------------------------------------------------------------------------ Package : ethereal Problem type :...

Jan Hubicka Koules 1.4 - Svgalib Local Buffer Overflow

Jan Hubicka Koules 1.4 - Svgalib Local Buffer Overflow / source: https://www.securityfocus.com/bid/1967/info Koules is an original, arcade-style game authored by Jan Hubicka. The version using svgalib is usually installed setuid root so that it may access video hardware when being run at the...

Jan Hubicka Koules 1.4 - 'Svgalib' Local Buffer Overflow

/ source: https://www.securityfocus.com/bid/1967/info Koules is an original, arcade-style game authored by Jan Hubicka. The version using svgalib is usually installed setuid root so that it may access video hardware when being run at the console by regular users. This version contains a buffer...

[SECURITY] New Debian cron packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 17, 2000 - ---------------------------------------------------------------------------- Package: cron Vulnerability:...

[SECURITY] New version of tcsh released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 11, 2000 - ------------------------------------------------------------------------ Package: tcsh Vulnerability: local...

[SECURITY] New version of Debian php4 packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 14, 2000 - ---------------------------------------------------------------------------- Package: php4 Vulnerability:...

[SECURITY] New version of Netscape Communicator/Navigator released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 1, 2000 - ---------------------------------------------------------------------------- Package: netscape communicator,...

[SECURITY] new version of zope released (updated)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone August 21, 2000 - ------------------------------------------------------------------------ Package: zope Vulnerability type: remote...