Mandrake Linux Security Advisory : gnupg (MDKSA-2000:063-1)

A problem exists in all versions of GnuPG prior to and including 1.0.3. Because of this problem, GnuPG may report files which have been signed with multiple keys one or more of which may be incorrect to be valid even if one of the signatures is in fact valid. Update : The previous packages...

Mandrake Linux Security Advisory : Mesa (MDKSA-2001:029)

Ben Collins identified a temporary file race in the Utah-glx component of the Mesa package which affects Linux-Mandrake 7.2. The /tmp/glxmemory file is created by Utah-glx and because it is not created securely could be used in a symlink attack which allows files to be overwritten the next time t...

Mandrake Linux Security Advisory : dhcp (MDKSA-2000:013)

The OpenBSD team discovered a vulnerability in it that allows for remote exploitation by a corrupt dhcp server, or an attacker pretending to be a dhcp server. If this vulnerability is exploited, root access can be gained on the host running dhcp client remotely. The problem is that input is not...

Mandrake Linux Security Advisory : apache (MDKSA-2000:060-2)

The Apache web server comes with a module called modrewrite which is used to rewrite URLs presented by the client prior to further processing. There is a flaw in the modrewrite logic that allows an attacker to view arbitrary files on the server system if they contain regular expression references...

Mandrake Linux Security Advisory : fdutils (MDKSA-2000:005)

A vulnerability in fdmount will allow any user to exploit a buffer overflow. This user, when he is in the floppy group, can have a root access on the machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake...

Mandrake Linux Security Advisory : Zope (MDKSA-2000:026)

Previous versions of Zope have a serious security flaw in one of the base classes in the DocumentTemplate package that is inadequately protected. This flaw allows the contents of DHTML Documents or DHTML Methods to be changed remotely or through DHTML code without forcing proper user authorizatio...

Mandrake Linux Security Advisory : Zope (MDKSA-2001:049)

Another problem was discovered in Zope that fixes a problem with ZClasses. Any user can visit a ZClass declaration and change the ZClass permission mappings for methods and other objects defined within the ZClass, possibly allowing for unauthorized access within the Zope instance. The Zope Hotfix...

Mandrake Linux Security Advisory : gpm (MDKSA-2000:025)

Many security flaws existed in the gpm package, which is used to control the mouse in a terminal outside of X Windows. As well, a denial of service attack via /dev/gpmctl is possible. All security issues with the gpm package have been addressed with this update. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : bash1 (MDKSA-2000:075)

The bash1 shell program has the same vulnerability that tcsh has and incorrectly creates temporary files without the OEXCL flag. This vulnerability does not exist in bash2 which uses the OEXCL flag when creating temporary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandrake Linux Security Advisory : nmh (MDKSA-2000:000)

The nmh package contains a security bug in MIME headers parsing which can be exploited to trick mhshow into executing arbitrary shell code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security...

Mandrake Linux Security Advisory : xlockmore (MDKSA-2000:011)

Xlock is an X11 utility used to lock X-Window displays until the password of the user running X is entered correctly. Of course, in order to perform the password-check xlock must be setuid root and have access to the shadowed passwd file. In the xlockmore distributions versions prior to 4.16.1, a...

Mandrake Linux Security Advisory : xsoldier (MDKSA-2000:004)

A vulnerability in xsoldier will allow any user to exploit a buffer overflow. This user does not have to have a valid $DISPLAY to exploit this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security...

Mandrake Linux Security Advisory : sysklogd (MDKSA-2000:050-1)

A problem exists with the kernel logging daemon klogd in the sysklogd package. A 'format bug' makes klogd vulnerable to local root compromise, as well as the possibility for remote vulnerabilities under certain circumstances, which are unprobable. There is also a more probable semi-remote exploit...

Mandrake Linux Security Advisory : Zope (MDKSA-2000:043)

The exploit that was not fixed with the previous Zope hotfix involves the getRoles method of user objects contained in the default UserFolder implementation returning a mutable Python type. Because the mutable object is still associated with the persistent User object, users with the ability to...

Mandrake Linux Security Advisory : tcsh (MDKSA-2000:069)

A vulnerability exists with tcsh when using the in-here documents with the syntax. When doing this, tcsh uses a temporary file to store the data. Unfortunately, the temporary file is not created securely and standard symlink attacks can be used to make tcsh overwrite arbitrary files. %NASLMINLEVE...

Mandrake Linux Security Advisory : mgetty (MDKSA-2000:042)

There is a problem in the mgetty package, which contains a number of tools for sending and receiving faxes. The faxrunq tool uses a marker file in the /tmp directory, which is world-writable, in an insecure fashion. This problem, if exploited, allows malicious users to overwrite files on the syst...

Mandrake Linux Security Advisory : dump (MDKSA-2000:018)

There was the potential for a buffer overflow exploit in the restore program. This new version fixes this possible vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory...

Mandrake Linux Security Advisory : inn (MDKSA-2000:023)

A vulnerability exists when verifycancels is enabled in /etc/news/inn.conf. This vulnerability could be used to gain root access on any system with inn installed. This new version also does not install inews as setgid news or rnews as setuid root. Many other security paranoia fixes have been made...

Mandrake Linux Security Advisory : jpilot (MDKSA-2000:081)

The jpilot program automatically creates a directory called .jpilot/ in the user's home directory with 777 world read/write/execute permissions. This directory is used to store all backups, configuration and synchronized Palm Pilot information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2000:066-1)

A race condition exists in versions of nssldap prior to version 121. On a system running nscd, a malicious user can cause the system to hang. Update : Due to a new packaging scheme, the updates have been re-released with the appropriate revision number. %NASLMINLEVEL 70300 C Tenable Network...