CVE-2000-1059

The CVE-2000-1059 issue affects Mandrake Linux 7.0 and 7.1, where the default /etc/X11/Xsession configuration disables Xauthority via an "xhost + localhost" setting. This allows local users to connect to an X server on the localhost, potentially sniffing X Windows events and escalating privileges...

CVE-2000-1042

Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog function...

CVE-2000-1059

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges...

CVE-2000-0883

The default configuration of modperl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory...

CVE-2000-1043

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog function...

CVE-2000-0883

The CVE-2000-0883 entry concerns Mandrake Linux mod_perl on Apache where the default mod_perl configuration (Mandrake 6.1–7.1) sets the /perl/ directory to be browseable, allowing remote listing of that directory. The vulnerability arises from an insecure Options directive that permits directory ...

CVE-2000-1059

The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" command, which allows local users to sniff X Windows events and gain privileges...

CVE-2000-1043

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog function...

CVE-2000-1042

Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog function...

CVE-2000-0883

The default configuration of modperl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory...

Linux news 24.10.00

2.4.0-test10-pre5 is out Вышла очередная пре версия тестового ядра 2.4.0-test10, в этой версии по сравнению с предыдущей много мелких фиксов, как минимум еще одна проблема остается открытой. Подробнее: http://dredd.crimea.edu/linuxnews/test10-pre5.txt Mandrake 7.2 выйдет 28 октября Выход следующе...

CVE-2000-0633

Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system...

CVE-2000-0374

The CVE describes that the default configuration of kdm (Caldera/Mandrake Linux and possibly others) allows XDMCP connections from any host, causing information leakage and potential bypass of access restrictions. CERT/CC notes this as an information leakage vulnerability via XDMCP daemon default...

CVE-2000-0374

The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions...

CVE-2000-0633

Technical details for CVE-2000-0633 are not publicly available in the provided documents. The description notes a local reboot/halt issue in the Mandrake Linux usermode package, but no specifics on affected versions, root cause, or fixes are supplied. Monitor for updates.

Mandrake 6.17.07.1 - perl HTTP Directory Disclosure

Mandrake 6.17.07.1 - perl HTTP Directory Disclosure source: https://www.securityfocus.com/bid/1678/info The default configuration files for versions of modperl shipped with Mandrake Linux 6.1 through 7.1 contain a misconfiguration that can be a security concern in some situations. The /perl...

Mandrake 6.1/7.0/7.1 - '/perl' HTTP Directory Disclosure

source: https://www.securityfocus.com/bid/1678/info The default configuration files for versions of modperl shipped with Mandrake Linux 6.1 through 7.1 contain a misconfiguration that can be a security concern in some situations. The /perl directory is part of the webserver's root tree the...

CVE-2000-0633

Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system...

xsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/871/info Certain versions of FreeBSD 3.3 Confirmed and Linux Mandrake confirmed ship with a vulnerable binary in their X11 games package. The binary/game in question, xsoldier, is a setuid root binary meant to be run via an X windows console. The binar...

Mandrake 6.x RedHat 6.x Turbolinux 3.5 b24.x6.0.2 userhelperPAM - Path (2)

Mandrake 6.x RedHat 6.x Turbolinux 3.5 b24.x6.0.2 userhelperPAM - Path 2 // source: https://www.securityfocus.com/bid/913/info Because of double path vulnerabilities in the binary userhelper and PAM, it is possible to get root locally on RedHat 6.0 and 6.1 systems. Both userhelper and PAM follow...