[SECURITY] [DSA-138-1] Remote execution exploit in gallery

Package : gallery Problem type : remote exploit Debian-specific: no A problem was found in gallery a web-based photo album toolkit: it was possible to pass in the GALLERYBASEDIR variable remotely. This made it possible to execute commands under the uid of web-server. This has been fixed in versio...

[SECURITY] [DSA-127-1] buffer overflow in xpilot-server

Package : xpilot Problem type : remote buffer overflow Debian-specific: no An internal audit by the xpilot a multi-player tactical manoeuvring game for X maintainers revealed a buffer overflow in xpilot server. This overflow can be abused by remote attackers to gain access to the server under whi...

phpGroupWare 0.9.13 - Debian Package Configuration

phpGroupWare 0.9.13 - Debian Package Configuration source: https://www.securityfocus.com/bid/4424/info PHPGroupWare is a freely available, open source groupware system written in PHP. It is distributed and maintained by the PHPGroupWare project. Debian packages of PHPGroupWare ship with an insecu...

[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 - -------------------------------------------------------------------------- Package : gnujsp...

cdrdao insecure filehandling

-- Description -- There are several security-related Bugs in the distributed Debian SID Package of CDRDAO, a program to write audio or mixed mode CD-Rs in disk-at-once mode. /usr/bin/cdrdao is setuid-Root by default. -- Version -- Name: Cdrdao Version: 1.1.5 Autor: Andreas Mueller [email protected]...

[SECURITY] [DSA-074-1] buffer overflow in Window Maker

Package : wmaker Problem type : buffer overflow Debian-specific: no Alban Hertroys found a buffer overflow in Window Maker a popular window manager for X. The code that handles titles in the window list menu did not check the length of the title when copying it to a buffer. Since applications wil...

[SECURITY] [DSA-070-1] netkit-telnet AYT buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-070-1 [email protected] http://www.debian.org/security/ Robert van der Meulen August 10, 2001 - ------------------------------------------------------------------------ Package : netkit-telnet...

[SECURITY] [DSA-046-1] exuberant-ctags uses insecure temporary files

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-046-1 [email protected] http://www.debian.org/security/ Wichert Akkerman April 15, 2001 -...

CVE-1999-0732

The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links...

[SECURITY] New versions of smtp-refuser fixes security hole

This bug was experienced in May 1999 but wasnt reported on this channel yet. Former versions of the smtp-refuser package came with unchecked logging facility to /tmp/log. This allowed deleting arbitrary, root-owned files by any user who has write access to /tmp. We recommend you upgrade your...

cfengine.symlink.txt

Date: Tue, 16 Feb 1999 01:12:20 +0100 From: Wichert Akkerman To: [email protected] Subject: SECURITY New versions of cfengine fixes symlink attack -----BEGIN PGP SIGNED MESSAGE----- The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files wh...

PT-1999-1308 · Debian · Man-Db

Name of the Vulnerable Software and Affected Versions: man-db affected versions not specified Description: The issue allows local users to overwrite files via a symlink attack using the zsoelim program in the Debian man-db package. Recommendations: At the moment, there is no information about a...

[SECURITY] Seyon is vulnerable to a root exploit

Description We have received a report from SGI that a vulnerability has been discovered in the seyon program. This can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. Since SGI does not provide exploit information, we are unable to fix the...