Adobe Acrobat creates world writable ~/AdobeFnt.lst files

Adobe Acrobat creates world writable /AdobeFnt.lst files This problem is present in at least the Linux version: ftp://ftp.adobe.com/pub/adobe/acrobatreader/unix/4.x/linux-ar-405.tar.gz Even with umask as restrictive as 077, the Adobe binary explicitly creates and changes the AdobeFnt.lst file in...

Fatal flaw in BestCrypt <= v0.7 (Linux)

Hello fellow Bugtraq'ers. As you can see in the message below I have discovered a flaw in the SUID-root "bctool" program that comes with BestCrypt from Jetico. A session transcript where the flaw is exploited is also included and so is a patch for the problem. For those of you that did not know,...

[SECURITY] [DSA-055-1] gftp remote exploit

Package : gftp Problem type : printf format attack Debian-specific: no The gftp package as distributed with Debian GNU/Linux 2.2 has a problem in its logging code: it logged data received from the network but it did not protect itself from printf format attacks. An attacker can use this by making...

CVE-2001-0069

dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack...

Shoutcast Server Buffer Crashes Server

The following information is being released by PA Networks to expose a potential problem with the Shoutcast server for Linux version v1.7.1 for Shoutcast Distributed Network Audio Server. During testing of new streams the following was discovered. Software Needed To Perform This Overflow: Winamp...

IBM DB2 - Universal Database for Linux 6.1Windows NT 6.1 Known Default Password

IBM DB2 - Universal Database for Linux 6.1Windows NT 6.1 Known Default Password source: https://www.securityfocus.com/bid/2068/info IBM DB2 Universal Database is a distributed database application. DB2 Universal Database contains a default username and password that would enable a user access to...

vqserver.dos.txt

DHC Advisory Advisory for vqServer 1.4.49 vqServer is made by vqSoft. Site: http://www.vqsoft.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] /-|=explaination=|-\ When sending vqServer version 1.4.49 a malformed URL request it will crash the service. This has been...

Linux news 11.08.00

FOR ALL Ну вот ... вот и кончился отпуск ! : И начались суровы будни. Все как и раньше: рассылка переходит из спящего режима в обычный, регулярный ритм ... ну или подобие тому : В общем всем жаркого лета, теплого пЫва и ... Ядро 2.2.17pre16 В очередной бета версии следующего стабильного ядра ветк...

CVE-1999-0409

Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access...

oracle8-tnslsnr-DoS.txt

Oracle8 TNSLSNR DoS Jason Ackley [email protected] Mon, 28 Dec 1998 16:21:20 -0800 Greetings, I hope everyone had happy holidays with the IOS and Sun bugs, but now its time to get back to business.. Ohhh OK, one more DoS ! : Hopefully this is new, I searched the archives for 'tns' and 'oracle', bu...

linux2.2.1-proc-smp-race-sniffer.txt

Date: Tue, 2 Feb 1999 17:39:13 +0100 From: Andrea Arcangeli To: [email protected] Subject: patch /proc race fixes for 2.2.1 fwd This is a short analysis I've done yesterday about the array.c /proc/pid/... races of Linux-2.2.0 and Linux-2.2.1. These races was leading to very easily reproducible...

CVE-1999-0409

Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access...

CVE-1999-0401

A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files...

Armidale Software Yapp Conferencing System 2.2 - Local Buffer Overflow

Armidale Software Yapp Conferencing System 2.2 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/365/info Armidale Software's Yapp Conferencing System is vulnerable to an environment variable related buffer overflow vulnerability in at least the Linux version. The consequence o...