Mandrake Linux Security Advisory : glibc (MDKSA-2001:095)

Flavio Veloso found an overflowable buffer problem in earlier versions of the glibc glob3 implementation. It may be possible to exploit some programs that pass input to the glibc glob function in a manner that can be modified by the user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandrake Linux Security Advisory : passwd (MDKSA-2001:091)

The default pam files for the passwd program did not include support for md5 passwords, thus any password changes or post-install added users would not have md5 passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Mandrake Linux Security Advisory : gkrellm (MDKSA-2003:087)

A buffer overflow was discovered in gkrellmd, the server component of the gkrellm monitor package, in versions of gkrellm 2.1.x prior to 2.1.14. This buffer overflow occurs while reading data from connected gkrellm clients and can lead to possible arbitrary code execution as the user running the...

Mandrake Linux Security Advisory : nfs-utils (MDKSA-2003:076)

An off-by-one buffer overflow was found in the logging code in nfs-utils when adding a newline to the string being logged. This could allow an attacker to execute arbitrary code or cause a DoS Denial of Service on the server by sending certain RPC requests. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : leafnode (MDKSA-2003:005)

A vulnerability was discovered by Jan Knutar in leafnode that Mark Brown pointed out could be used in a Denial of Service attack. This vulnerability causes leafnode to go into an infinite loop with 100% CPU use when an article that has been crossposed to several groups, one of which is the prefix...

Mandrake Linux Security Advisory : vixie-cron (MDKSA-2001:050)

A recent security fix to cron introduced a new problem with giving up privileges before invoking the editor. A malicious local user could exploit this to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Mandrake Linux Security Advisory : ypserv (MDKSA-2003:072)

A vulnerability was found in versions of ypserv prior to version 2.7. If a malicious client were to query ypserv via TCP and subsequently ignore the server's response, ypserv will block attempting to send the reply. The result is that ypserv will fail to respond to other client requests. ypserv 2...

Mandrake Linux Security Advisory : MySQL (MDKSA-2003:057)

In MySQL 3.23.55 and earlier, MySQL would create world-writeable files and allow mysql users to gain root privileges by using the 'SELECT INTO OUTFILE' operator to overwrite a configuration file, which could cause mysql to run as root upon restarting the daemon. This has been fixed upstream in...

Mandrake Linux Security Advisory : glibc (MDKSA-2002:061)

A heap buffer overflow exists in the XDR decoder in glibc version 2.2.5 and earlier. XDR is a mechanism for encoding data structures for use with RPC, which is derived from Sun's RPC implementation which is likewise vulnerable to a heap overflow. Depending on the application, this vulnerability m...

Mandrake Linux Security Advisory : openldap (MDKSA-2002:013)

A problem exists in all versions of OpenLDAP from 2.0.0 through 2.0.19 where permissions are not properly checked using access control lists when a user tries to remove an attribute from an object in the directory by replacing it's values with an empty list. Schema checking is still enforced, so ...

Mandrake Linux Security Advisory : cvs (MDKSA-2003:112-1)

A vulnerability was discovered in the CVS server 1.11.10 where a malformed module request could cause the CVS server to attempt to create directories and possibly files at the root of the filesystem holding the CVS repository. Updated packages are available that fix the vulnerability by providing...

Mandrake Linux Security Advisory : sharutils (MDKSA-2002:052)

The uudecode utility creates output files without checking to see if it is about to write to a symlink or pipe. This could be exploited by a local attacker to overwrite files or lead to privilege escalation if users decode data into share directories, such as /tmp. This update fixes this...

Mandrake Linux Security Advisory : wget (MDKSA-2002:086)

A vulnerability in all versions of wget prior to and including 1.8.2 was discovered by Steven M. Christey. The bug permits a malicious FTP server to create or overwriet files anywhere on the local file system by sending filenames beginning with '/' or containing '/../'. This can be used to make...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2001:063)

Wolfram Kleff reported recently that the fetchmail program would segfault when receiving emails with a very large 'To:' header. This is due to a buffer overflow within the header parsing code, which can be exploited remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

Mandrake Linux Security Advisory : tcpdump (MDKSA-2003:027)

A vulnerability was discovered by Andrew Griffiths and iDEFENSE Labs in the tcpdump program. By sending a specially crafted network packet, an attacker is able to to cause tcpdump to enter an infinite loop. In addition, the tcpdump developers found a potential infinite loop when tcpdump parses...

Mandrake Linux Security Advisory : gv (MDKSA-2002:069)

A buffer overflow was discovered in gv versions 3.5.8 and earlier by Zen Parse. The problem is triggered by scanning a file and can be exploited by an attacker sending a malformed PostScript or PDF file. This would result in arbitrary code being executed with the privilege of the user viewing the...

Mandrake Linux Security Advisory : openssh (MDKSA-2001:081)

In some circumstances, the sshd server may not honor the 'from=' option that can be associated with a key in a user's /.ssh/authorizedkeys2 file if multiple keys are listed. This could allow key-based logins from hosts which should not be allowed access. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : sox (MDKSA-2004:076)

Ulf Harnhammar discovered two buffer overflows in SoX. They occur when the sox or play commands handle malicious .WAV files. Versions 12.17.4, 12.17.3 and 12.17.2 are vulnerable to these overflows. 12.17.1, 12.17 and 12.16 are some versions that are not. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : lynx (MDKSA-2003:023)

A vulnerability was discovered in lynx, a text-mode web browser. The HTTP queries that lynx constructs are from arguments on the command line or the $WWWHOME environment variable, but lynx does not properly sanitize special characters such as carriage returns or linefeeds. Extra headers can be...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2003:011)

A vulnerability was discovered in all versions of fetchmail prior to 6.2.0 that allows a remote attacker to crash fetchmail and potentially execute arbitrary code by sending carefully crafted email wihch is then parsed by fetchmail. The vulnerability has been fixed in these patched packages of...