linuxconf.txt

Date: Sat, 22 Aug 1998 20:35:42 -0500 From: Alex Mottram Subject: Security concerns in linuxconf shipped w/RedHat 5.1 There exists a security / DOS problem with linuxconf-1.11.r11-rh3/i386 as upgraded from RedHat's FTP site. No other versions have been tested by me. Both the maintainer of linuxco...

[SECURITY] Corrected advisory on wu-ftpd-academ buffer overflow

The previous advisory concerning wu-ftpd-academ contained an error: the md5sum given for wu-ftpd-academ2.4.2.16-12.2i386.deb was incorrect. The correct md5sum is b851adb345917a6f92e8b03f8cc97ff2. I apologize for the confusion this has caused. The complete, updated, text of the advisory follows...

PT-1997-1070 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail versions prior to the fixed version Description: The issue allows an attacker to execute root commands using a pipe character. Recommendations: For versions prior to the fixed version, update to the fixed version to resolve the issue...

Mutt Controlled IMAP server buffer overflow

Advisory ID Internal CORE-20030304-02 Bugtraq ID: 7120 CVE Name: CAN-2003-0140 Title: Mutt Controlled IMAP server buffer overflow Class: Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: No Vendors notified: . Core Notification: 2003-03-11 . Notification...

PHP Code Injection

phpWhois PHP Code Injection Vulnerability Overview phpWhois and some of its forks in versions before 5.1.0 are prone to a code injection vulnerability due to insufficient sanitization of returned WHOIS data. This allows attackers controlling the WHOIS information of a requested domain to execute...