Mandrake Linux Security Advisory : cups (MDKSA-2005:165)

A vulnerability in CUPS would treat a Location directive in cupsd.conf as case-sensitive, allowing attackers to bypass intended ACLs via a printer name containing uppercase or lowecase letters that are different from that which was specified in the Location directive. This issue only affects...

Mandrake Linux Security Advisory : kdeedu (MDKSA-2005:159)

Ben Burton notified the KDE security team about several tempfile handling related vulnerabilities in langen2kvtml, a conversion script for kvoctrain. This vulnerability was initially discovered by Javier Fernndez-Sanguino Pea. The script uses known filenames in /tmp which allow an local attacker ...

Mandrake Linux Security Advisory : shorewall (MDKSA-2005:123)

A vulnerability was discovered in all versions of shorewall where a client accepted by MAC address filtering is able to bypass any other rule. If MACLISTTTL is set to a value greater than 0 or MACLISTDISPOSITION is set to ACCEPT in shorewall.conf, and a client is positively identified through its...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2005:122)

The Kate and Kwrite programs create a file backup before saving a modified file. These backup files are created with default system permissions, even if the original file had more strict permissions set. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2005:121)

Rob Holland, of the Gentoo Security Audit Team, discovered that pamldap and nssldap would not use TLS for referred connections if they are referred to a master after connecting to a slave, regardless of the 'ssl starttls' setting in ldap.conf. As well, a bug in nssldap in Corporate Server and...

Mandrake Linux Security Advisory : dhcpcd (MDKSA-2005:117)

'infamous42md' discovered that the dhcpcd DHCP client could be tricked into reading past the end of the supplied DHCP buffer, which could lead to the daemon crashing. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandrake Linux Security Advisory : ruby (MDKSA-2005:118)

A vulnerability was discovered in ruby version 1.8 that could allow for the execution of arbitrary commands on a server running the ruby xmlrpc server. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Mandrake Linux Security Advisory : cpio (MDKSA-2005:116-1)

A race condition has been found in cpio 2.6 and earlier which allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by cpio after the decompression is complete CVE-2005-1111. A vulnerability has...

Mandrake Linux Security Advisory : clamav (MDKSA-2005:113)

Andrew Toller and Stefan Kanthak discovered that a flaw in libmspack's Quantum archive decompressor renders Clam AntiVirus vulnerable to a Denial of Service attack. The updated packages have been patched to correct the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandrake Linux Security Advisory : mplayer (MDKSA-2005:115)

Two heap overflows were discovered in mplayer's code handling the RealMedia RTSP and Microsoft Media Services streams over TCP MMST. These vulnerabilities could allow for a malicious server to execute arbitrary code on the client computer with the permissions of the user running MPlayer. The...

Mandrake Linux Security Advisory : zlib (MDKSA-2005:112)

Tavis Ormandy of the Gentoo Security Project discovered a vulnerability in zlib where a certain data stream would cause zlib to corrupt a data structure, resulting in the linked application to dump core. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : kernel (MDKSA-2005:110)

Multiple vulnerabilities in the Linux kernel have been discovered and fixed in this update. The following CVE names have been fixed in the LE2005 kernel : Colin Percival discovered a vulnerability in Intel's Hyper-Threading technology could allow a local user to use a malicious thread to create...

Mandrake Linux Security Advisory : kernel-2.4 (MDKSA-2005:111)

Multiple vulnerabilities in the Linux kernel have been discovered and fixed in this update. The following have been fixed in the 2.4 kernels : Colin Percival discovered a vulnerability in Intel's Hyper-Threading technology could allow a local user to use a malicious thread to create covert...

Mandrake Linux Security Advisory : php-pear (MDKSA-2005:109)

A vulnerability was discovered by GulfTech Security in the PHP XML RPC project. This vulnerability is considered critical and can lead to remote code execution. The vulnerability also exists in the PEAR XMLRPC implementation. Mandriva ships with the PEAR XMLRPC implementation and it has been...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2005:107)

A heap-based buffer overflow was found in the way that ImageMagick parses PNM files. If an attacker can trick a victim into opening a specially crafted PNM file, the attacker could execute arbitrary code on the victim's machine CVE-2005-1275. As well, a Denial of Service vulnerability was found i...

Mandrake Linux Security Advisory : spamassassin (MDKSA-2005:106)

A Denial of Service bug was discovered in SpamAssassin. An attacker could construct a particular message that would cause SpamAssassin to consume CPU resources. If a large number of these messages were sent, it could lead to a DoS. SpamAssassin 3.0.4 was released to correct this vulnerability, as...

Mandrake Linux Security Advisory : squid (MDKSA-2005:104)

A bug was found in the way that Squid handles DNS replies. If the port Squid uses for DNS requests is not protected by a firewall, it is possible for a remote attacker to spoof DNS replies, possibly redirecting a user to spoofed or malicious content. %NASLMINLEVEL 70300 C Tenable Network Security...

Mandrake Linux Security Advisory : dbus (MDKSA-2005:105)

Dan Reed discovered a vulnerability in the D-BUS system for sending messages between applications. He found that a user can send and listen to messages on another user's per-user session bus if they knew the address of the socket. The updated packages have been patched to correct this problem...

Mandrake Linux Security Advisory : sudo (MDKSA-2005:103)

A race condition was discovered in sudo by Charles Morris. This could lead to the escalation of privileges if /etc/sudoers allowed a user to execute selected programs that were then followed by another line containing the pseudo-command 'ALL'. By creating symbolic links at a certain time, that us...

Mandrake Linux Security Advisory : gaim (MDKSA-2005:099)

More vulnerabilities have been discovered in the gaim IM client. The first is a remote crash with the Yahoo! protocol CVE-2005-1269 and the second is a remote DoS in the MSN protocol CVE-2005-1934. These problems have been corrected in gaim 1.3.1 which is provided with this update. %NASLMINLEVEL...