Mandrake Linux Security Advisory : ethereal (MDKSA-2006:002)

Three vulnerabilities were discovered in Ethereal 0.10.13 : The IRC and GTP dissectors could go into an infinite loop. A buffer overflow was discovered by iDefense in the OSPF dissector. Ethereal has been upgraded to 0.10.14 which does not suffer from these problems. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : php (MDKSA-2005:213)

"A number of vulnerabilities were discovered in PHP : An issue with fopenwrappers.c would not properly restrict access to other directories when the openbasedir directive included a trailing slash CVE-2005-3054 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandrake Linux Security Advisory : curl (MDKSA-2005:224)

Stefan Esser discovered that libcurl's URL parser function can have a malloced buffer overflows in two ways if given a too long URL. It cannot be triggered by a redirect, which makes remote exploitation unlikely, but can be passed directly to libcurl allowing for local exploitation and could also...

Mandrake Linux Security Advisory : apache2 (MDKSA-2005:233)

A memory leak in the worker MPM in Apache 2 could allow remote attackers to cause a Denial of Service memory consumption via aborted commands in certain circumstances, which prevents the memory for the transaction pool from being reused for other connections. As well, this update addresses two bu...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2005:209)

Thomas Wolff and Miloslav Trmac discovered a race condition in the fetchmailconf program. fetchmailconf would create the initial output configuration file with insecure permissions and only after writing would it change permissions to be more restrictive. During that time, passwords and other dat...

Mandrake Linux Security Advisory : w3c-libwww (MDKSA-2005:210)

Sam Varshavchik discovered the HTBoundaryputblock function in HTBound.c for W3C libwww w3c-libwww allows remote servers to cause a denial of service segmentation fault via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read. The updated packages have been patched to...

Mandrake Linux Security Advisory : webmin (MDKSA-2005:176)

Miniserv.pl in Webmin 1.220, when 'full PAM conversations' is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return. The updated packages have been patched to correct this issues. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2005:226)

A bug in enigmail, the GPG support extension for Mozilla MailNews and Mozilla Thunderbird was discovered that could lead to the encryption of an email with the wrong public key. This could potentially disclose confidential data to unintended recipients. The updated packages have been patched to...

Mandrake Linux Security Advisory : lynx (MDKSA-2005:211)

An arbitrary command execution vulnerability was discovered in the lynx 'lynxcgi:' URI handler. An attacker could create a web page that redirects to a malicious URL which could then execute arbitrary code as the user running lynx. The updated packages have been patched to address this issue...

Mandrake Linux Security Advisory : webmin (MDKSA-2005:223)

Jack Louis discovered a format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled. This can allow remote attackers to cause a denial of service crash or memory consumption and possibly execute arbitrary code via format...

Mandrake Linux Security Advisory : kolab-resource-handlers (MDKSA-2006:013)

A problem exists in how the Kolab Server transports emails bigger than 8KB in size and if a dot '.' character exists in the wrong place. If these conditions are met, kolabfilter will double this dot and a modified email will be delivered, which could lead to broken clear-text signatures or broken...

Mandrake Linux Security Advisory : libungif (MDKSA-2005:207)

Several bugs have been discovered in the way libungif decodes GIF images. These allow an attacker to create a carefully crafted GIF image file in such a way that it could cause applications linked with libungif to crash or execute arbitrary code when the file is opened by the user. The updated...

Mandrake Linux Security Advisory : gda2.0 (MDKSA-2005:203)

Steve Kemp discovered two format string vulnerabilities in libgda2, the GNOME Data Access library for GNOME2, which may lead to the execution of arbitrary code in programs that use this library. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : mailman (MDKSA-2005:222)

Scrubber.py in Mailman 2.1.4 - 2.1.6 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service. CVE-2005-3573 In addition, these versions of mailman have an issue where the server will fail with an Overflow on...

Mandrake Linux Security Advisory : unzip (MDKSA-2005:197)

Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges. CVE-2005-0602 Imran Ghory found a race condition in the handling of output files. While a file was unpacked by unzip, a local attacker with write...

Mandrake Linux Security Advisory : squid (MDKSA-2005:195)

The rfc1738doescape function in ftp.c for Squid 2.5.STABLE11 and earlier allows remote FTP servers to cause a denial of service segmentation fault via certain 'odd' responses. The updated packages have been patched to address these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandrake Linux Security Advisory : sudo (MDKSA-2005:201)

Tavis Ormandy discovered that sudo does not perform sufficient environment cleaning; in particular the SHELLOPTS and PS4 variables are still passed to the program running as an alternate user which can result in the execution of arbitrary commands as the alternate user when a bash script is...

Mandrake Linux Security Advisory : imap (MDKSA-2005:189)

'infamous41md' discovered a buffer overflow in uw-imap, the University of Washington's IMAP Server that allows attackers to execute arbitrary code. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandrake Linux Security Advisory : perl-Compress-Zlib (MDKSA-2005:196)

The perl Compress::Zlib module contains an internal copy of the zlib library that was vulnerable to CVE-2005-1849 and CVE-2005-2096. This library was updated with version 1.35 of Compress::Zlib. An updated perl-Compress-Zlib package is now available to provide the fixed module. %NASLMINLEVEL 7030...

Mandrake Linux Security Advisory : nss_ldap (MDKSA-2005:190)

A bug was found in the way the pamldap module processed certain failure messages. If the server includes supplemental data in an authentication failure result message, but the data does not include any specific error code, the pamldap module would proceed as if the authentication request had...