CVE-1999-1477

CVE-1999-1477: Buffer overflow in GNOME libraries 1.0.8 permits a local user to gain root access via a long --espeaker argument, observed in programs such as nethack. The available documents confirm the affected component is GNOME libraries (version 1.0.8) and the attack requires local access; ro...

CVE-1999-1347

CVE-1999-1347 affects Red Hat Linux 6.1 and earlier. The vulnerability arises in Xsession, where local users with restricted accounts can bypass execution of the .xsession file by starting a desktop session (KDE, GNOME or similar) from KDM. This bypass allows the user to run with the environmenta...

CVE-1999-1477: Undefined Security Weakness

Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack...

CVE-2000-0864

Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...

CVE-2000-0864

The CVE-2000-0864 issue affects the esound daemon used by GNOME, with versions up to and including 0.2.19. A race condition during creation of the Unix domain socket (and its accompanying world-writable /tmp/.esd directory) allows a local attacker to change permissions on arbitrary files/director...

CVE-2000-0864: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...

Linux news 4.12.00

Ядро 2.4.0-test12-pre4 Linus выпустил очередное pre ядро следующего тестового 2.4.0. В нем он добавил патчи от Alan'а Cox'a, включил патч от Stephen Tweedie, исправляющий ошибки в инодах и наложил еще несколько патчей от различных разработчиков ... Подробнее: http://www.kernel.org OpenBSD 2.8 is...

Linux news 27.11.00

Alan Cox: Linux kernel 2.4.0test11ac4 Список фиксов довольно внушительный. Интересно, они изменения эти в релиз 2.4.0 войдут? Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-25-001-04-NW-KN fetchmail 5.6.0 Вышла новая версия fetchmail - fetchmail 5.6.0. В данной версии обновлен FAQ и...

Linux news 15.11.00

Linux Kernel pre-patch 2.4.0 test11-pre5 Пятый пререлиз одинадцатого тестового ядра Linux за номером 2.4. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Вышел Kernel Traffic 93 Вышел 93 номер Kernel Traffic. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-13-003-06-OS-KN Опро...

CVE-2000-0864

Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...

Linux news 1.11.00

Linux 2.2.18pre18 Alan Cox выпустил очередную pre-версию следующего стабильного ядра Linux: Linux 2.2.18pre18. Подробнее: http://linuxtoday.com/newsstory..php3?ltsn=2000-10-29-007-04-NW-KN Linux-2.4.0-test10-final Возможно последнее ядро в 2.4.0-test серии. Для релиза 2.4.0-stable ожидается...

CVE-2000-0792

Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...

CVE-2000-0722

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages...

CVE-2000-0724

The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files...

CVE-2000-0723

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config...

CVE-2000-0792

Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...

CVE-2000-0792

CVE-2000-0792 affects GNOME Lokkit firewall package prior to 0.41, which does not properly restrict access to some ports even if no services are available. This is described in the NVD entry with a base CVSS score of 7.5 (Network, Low complexity, No auth) and partial impacts to confidentiality, i...

CVE-2000-0792: Undefined Security Weakness

Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...

Linux news 27.09.00

Linux 2.2.18pre2aa2 Andrea Arcangeli выпустил следующую версию своей модификации ядра Linux для high-end серверов. Патч содержит поддержку до 4Gb памяти на платформе Intel, поддержку до 2Tb памяти на Alpha, улучшения VM для машин с большим объемом оперативки, Raw IO, улучшения SMP планировщика,...

CVE-2000-0722

The CVE-2000-0722 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier. It describes a local-privilege issue where an attacker can cause the installation of arbitrary RPM packages by pre-creating the /tmp/helix-install directory before the package installation sequence begins...