Mandrake Linux Security Advisory : mpg123 (MDKSA-2003:078)

A vulnerability in the mpg123 mp3 player could allow local and/or remote attackers to cause a DoS and possibly execute arbitrary code via an mp3 file with a zero bitrate, which causes a negative frame size. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

Mandrake Linux Security Advisory : gtkhtml (MDKSA-2003:046)

A vulnerability in GtkHTML was discovered by Alan Cox with the Evolution email client. GtkHTML is used to handle HTML messages in Evolution and certain malformed messages could cause Evolution to crash due to this bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandrake Linux Security Advisory : xchat (MDKSA-2004:036)

A remotely exploitable vulnerability was discovered in the Socks-5 proxy code in XChat. By default, socks5 traversal is disabled, and one would also need to connect to an attacker's own custom proxy server in order for this to be exploited. Successful exploitation could lead to arbitrary code...

Mandrake Linux Security Advisory : xloadimage (MDKSA-2001:073-1)

A buffer overflow exists in xli due to missing boundary checks. This could be triggered by an external attacker to execute commands on the victim's machine. An exploit is publically available. xli is an image viewer that is used by Netscape's plugger to display TIFF, PNG, and Sun-Raster images...

Mandrake Linux Security Advisory : tetex (MDKSA-2001:086)

A problem was discovered in the temporary file handling capabilities of some teTeX filters by zen-parse. These filters are used as print filters automatically when printing .dvi files using lpr. This can lead to elevated privileges. This update relies on the updated mktemp packages for 7.x in...

Mandrake Linux Security Advisory : XFree86 (MDKSA-2003:089)

Several vulnerabilities were discovered by bleximathush.com in the font libraries of XFree86 version 4.3.0 and earlier. These bugs could potentially lead to execution of arbitrary code or a DoS by a remote user in any way that calls these functions, which are related to the transfer and enumerati...

Mandrake Linux Security Advisory : apache (MDKSA-2004:065)

A buffer overflow vulnerability was found by George Guninski in Apache's modproxy module, which can be exploited by a remote user to potentially execute arbitrary code with the privileges of an httpd child process user apache. This can only be exploited, however, if modproxy is actually in use. I...

Mandrake Linux Security Advisory : XFree86 (MDKSA-2004:073)

Steve Rumble discovered XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions. The updated packages are patched to correct the problem. %NASLMINLEVEL 70300 C Tenab...

Mandrake Linux Security Advisory : webmin (MDKSA-2004:074)

Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module. CVE-2004-0582 The account lockout functionality in Webmin 1.140 does not parse certain character strings, which allows remote attackers to...

Mandrake Linux Security Advisory : xpdf (MDKSA-2003:071-1)

Martyn Gilmore discovered flaws in various PDF viewers, including xpdf. An attacker could place malicious external hyperlinks in a document that, if followed, could execute arbitary shell commands with the privileges of the person viewing the PDF document. Update : New packages are available as t...

Mandrake Linux Security Advisory : openldap (MDKSA-2003:006)

A review was completed by the SuSE Security Team on the OpenLDAP server software, and this audit revealed several buffer overflows and other bugs that remote attackers could exploit to gain unauthorized access to the system running the vulnerable OpenLDAP servers. Additionally, various locally...

Mandrake Linux Security Advisory : irssi (MDKSA-2003:117)

A vulnerability in versions of irssi prior to 0.8.9 would allow a remote user to crash another user's irssi client provided that the client was on a non-x86 architecture or if the 'gui print text' signal is being used by some script or plugin. The updated packages provide 0.8.9 which corrects the...

Mandrake Linux Security Advisory : samba (MDKSA-2001:062)

Michal Zalewski has found a vulnerability in all versions of Samba prior to 2.0.10 where if a client sends an invalid netbios name Samba could be tricked into appending it's log to files writable by root. This can be very dangerous if combined with a symlink created by a local user. Note that the...

Mandrake Linux Security Advisory : expect (MDKSA-2001:087)

A packaging problem that can lead to a root compromise existed in the expect package as provided in Mandrake Linux 8.1. expect would look for libraries in the directory /home/snailtalk/tmp/tcltk-root/usr/lib before any other and if such a user existed on the system, with rogue libraries, if root...

Mandrake Linux Security Advisory : telnet (MDKSA-2001:068)

A buffer overflow exists in telnet which could provide root access to local users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory MDKSA-2001:068. The text itself is copyright C Mandri...

Mandrake Linux Security Advisory : mtools (MDKSA-2004:016)

Sebastian Krahmer found that the mformat program, when installed suid root, can create any file with 0666 permissions as root, and that it also does not drop privileges when reading local configuration files. The updated packages remove the suid bit from mformat. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : ispell (MDKSA-2001:058)

The ispell program uses mktemp to open temporary files. This makes it vulnerable to symlink attacks. The program now has a patch from OpenBSD applied that uses mkstemp instead, and switches gets to fgets for dealing with user input. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandrake Linux Security Advisory : libuser (MDKSA-2004:044)

Steve Grubb discovered a number of problems in the libuser library that can lead to a crash in applications linked to it, or possibly write 4GB of garbage to the disk. The updated packages provide a patched libuser to correct these problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Mandrake Linux Security Advisory : evolution (MDKSA-2003:045)

Several vulnerabilities were discovered in the Evolution email client. These problems make it possible for a carefully constructed email message to crash the program, causing general system instability by starving resources. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

Mandrake Linux Security Advisory : WindowMaker (MDKSA-2001:074)

A buffer overflow exists in the WindowMaker window manager's window title handling code, as discovered by Alban Hertroys. Many programs, such as web browsers, set the window title to something obtained from the network, such as the title of the currently-viewed web page. As such, this buffer...