[SECURITY] [DSA 432-1] New crawl packages fix potential local games exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 432-1 [email protected] http://www.debian.org/security/ Martin Schulze February 3rd, 2004 http://www.debian.org/security/faq -...

Kernel security update

New kernels are available for Slackware 9.1 and -current. These have been upgraded to Linux kernel version 2.4.23, which fixes a bug in the kernel's dobrk function that could be exploited to gain root privileges. These updated kernels and modules should be installed by any sites running a 2.4...

Bug found at W3Mail Webmail

Name: W3Mail 1.0.2 Personal and Commercial Version Author: Spencer Miles Problem: Script doesnt check for special metacharacters like &;'"|?^$nr. Any webmail user can execute nix commands on webserver. Exploit: On any field at "Compose Message", put something like: Recipient example [email protected]";...

[SECURITY] New version of Debian php3 packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 14, 2000 - ---------------------------------------------------------------------------- Package: php3 Vulnerability:...

[SECURITY] New versions of sysklogd released

Package: sysklogd Vulnerability: root exploit Debian-specific: no Multiple vulnerabilities have been reported in syslogd and klogd. A local root exploit is possible, and remote exploits may be possible in some cases though we are not currently aware of a remote exploit. Fixed packages are availab...

[SECURITY] New version of userv released

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman July 27, 2000 - ------------------------------------------------------------------------...

[SECURITY] New version of nmh released

Package: nmh Vulnerability type: remote exploit Debian-specific: no The version of nmh that was distributed in Debian GNU/Linux 2.1 aka slink did not check incoming mail messages properly. This could be exploited by using carefully designed MIME headers to trick mhshow into executing arbitrary...

[SECURITY] New version of amd fixes remove exploit

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman September 24, 1999 - ------------------------------------------------------------------------ The version of amd that was...