Mandrake Linux Security Advisory : vim (MDKSA-2005:003)

Several 'modeline'-related vulnerabilities were discovered in Vim by Ciaran McCreesh. The updated packages have been patched with Bram Moolenaar's vim 6.3.045 patch which fixes the reported vulnerabilities and adds more conservative 'modeline' rights. %NASLMINLEVEL 70300 C Tenable Network Securit...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2004:160)

A vulnerability in the Konqueror web browser was discovered that would allow a malicious web site to take advantage of a flaw in kioftp to send email messages without user interaction. The updated packages are patched to correct the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Mandrake Linux Security Advisory : xpdf (MDKSA-2004:161)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated packages are patched to protect against these vulnerabilities...

Mandrake Linux Security Advisory : glibc (MDKSA-2004:159)

The Trustix developers discovered that the catchsegv and glibcbug utilities, part of the glibc package, created temporary files in an insecure manner. This could allow for a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program. The updated...

Mandrake Linux Security Advisory : gpdf (MDKSA-2004:162)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0 and several programs, like gpdf, which use embedded xpdf code. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated packages a...

Mandrake Linux Security Advisory : kdegraphics (MDKSA-2004:163)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0 and several programs, like kdegraphics, which use embedded xpdf code. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated...

Mandrake Linux Security Advisory : cups (MDKSA-2004:164)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0 and several programs, like cups, which use embedded xpdf code. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated packages a...

Mandrake Linux Security Advisory : logcheck (MDKSA-2004:155)

A vulnerability was discovered in the logcheck program by Christian Jaeger. This could potentially lead to a local attacker overwriting files with root privileges. The updated packages have been patched to prevent the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2004:154)

A vulnerability in the Konqueror webbrowser was discovered where an untrusted java applet could escalate privileges through JavaScript calling into Java code. This includes the reading and writing of files with the privileges of the user running the applet. The provided packages have been patched...

Mandrake Linux Security Advisory : krb5 (MDKSA-2004:156)

Michael Tautschnig discovered a heap buffer overflow in the history handling code of libkadm5srv which could be exploited by an authenticated user to execute arbitrary code on a Key Distribution Center KDC server. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300...

Mandrake Linux Security Advisory : mplayer (MDKSA-2004:157)

A number of vulnerabilities were discovered in the MPlayer program by iDEFENSE, Ariel Berkman, and the MPlayer development team. These vulnerabilities include potential heap overflows in Real RTSP and pnm streaming code, stack overflows in MMST streaming code, and multiple buffer overflows in the...

Mandrake Linux Security Advisory : aspell (MDKSA-2004:153)

A vulnerability was discovered in the aspell word-list-compress utility that can allow an attacker to execute arbitrary code. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Mandrake Linux Security Advisory : iproute2 (MDKSA-2004:148)

Herbert Xu discovered that iproute can accept spoofed messages sent via the kernel netlink interface by other users on the local machine. This could lead to a local Denial of Service attack. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : postgresql (MDKSA-2004:149)

The Trustix development team found insecure temporary file creation problems in a script included in the postgresql package. This could allow an attacker to trick a user into overwriting arbitrary files he has access to. The updated packages have been patched to prevent this problem. %NASLMINLEVE...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2004:143)

A vulnerability was discovered in ImageMagick where, due to a boundary error within the EXIF parsing routine, a specially crafted graphic image could potentially lead to the execution of arbitrary code. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable...

Mandrake Linux Security Advisory : openssl (MDKSA-2004:147)

The Trustix developers found that the derchop script, included in the openssl package, created temporary files insecurely. This could allow local users to overwrite files using a symlink attack. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : nfs-utils (MDKSA-2004:146)

SGI developers discovered a remote DoS Denial of Service condition in the NFS statd server. rpc.statd did not ignore the 'SIGPIPE' signal which would cause it to shutdown if a misconfigured or malicious peer terminated the TCP connection prematurely. The updated packages have been patched to...

Mandrake Linux Security Advisory : gzip (MDKSA-2004:142)

The Trustix developers found some insecure temporary file creation problems in the zdiff, znew, and gzeze supplemental scripts in the gzip package. These flaws could allow local users to overwrite files via a symlink attack. A similar problem was fixed last year CVE-2003-0367 in which this same...

Mandrake Linux Security Advisory : rp-pppoe (MDKSA-2004:145)

Max Vozeler discovered that when pppoe, part of the rp-pppoe package, is running setuid root, an attacker can overwrite any file on the system. Mandrakelinux does not install pppoe setuid, nor is it meant to be run setuid. Regardless, the packages have been patched to prevent this problem...

Mandrake Linux Security Advisory : lvm (MDKSA-2004:144)

The Trustix developers discovered that the lvmcreateinitrd script, part of the lvm1 package, created a temporary directory in an insecure manner. This could allow for a symlink attack to create or overwrite arbitrary files with the privileges of the user running the script. The updated packages...