Mandrake Linux Security Advisory : dhcp (MDKSA-2000:013)

The OpenBSD team discovered a vulnerability in it that allows for remote exploitation by a corrupt dhcp server, or an attacker pretending to be a dhcp server. If this vulnerability is exploited, root access can be gained on the host running dhcp client remotely. The problem is that input is not...

Mandrake Linux Security Advisory : vixie-cron (MDKSA-2001:022)

A buffer overflow exists in the 'crontab' command if it was called by a user with a username longer than 20 characters. If the system administrator has created usernames of that length, it would be possible for those users to gain elevated privileges. %NASLMINLEVEL 70300 C Tenable Network Securit...

Mandrake Linux Security Advisory : vim (MDKSA-2001:035)

Users could embed malicious VIM control codes into a file, and as soon as any user opened that file in vim-enhanced or vim-X11 with the status line option enabled in .vimrc, the commands would be executed as that user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandrake Linux Security Advisory : lpr (MDKSA-2000:054)

There is a format string bug in lpr with its calls to the syslog facility. There are no known exploits at ths time, but it may be possible for a user to gain local root access. This new lpr fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandrake Linux Security Advisory : wu-ftpd (MDKSA-2001:001-2)

WireX discovered a temporary file creation bug in the 2.6.1 release of wu-ftpd. The problem exists in the privatepw helper program. As well, Linux-Mandrake 7.2 users must update to this package as it fixes security problems as discussed in the prior advisory, MDKSA-2000:014, which had not been...

Mandrake Linux Security Advisory : bind (MDKSA-2001:017)

Four problems exists in all versions of ISC BIND 4.9.x prior to 4.9.8 and 8.2.x prior to 8.2.3 9.x is not affected. Version 8.2.x contains a buffer overflow in transaction signature TSIG handling code that can be exploited by an attacker to gain unauthorized privileged access to the system,...

Mandrake Linux Security Advisory : apcupsd (MDKSA-2000:077)

A problem exists with the apcupsd daemon. During startup, apcupsd creates a PID file in /var/run with the ID of the daemon process. This file is used by the shutdown script to kill the daemon process. The /var/run/apcupsd.pid file is created with mode 666 permissions, meaning it is world-writeabl...

Mandrake Linux Security Advisory : cups (MDKSA-2001:023)

A number of problems were found by the SuSE security team recently during an internal audit of the CUPS printing package. These problems have been resolved with the latest CUPS release which include temp file creation vulnerabilities, potential buffer overflows, and other security enhancements. I...

Mandrake Linux Security Advisory : dump (MDKSA-2000:007)

Dump may cause security problem due to a buffer overflow. This package removes the set gid root on the dump exec file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory MDKSA-2000:007. T...

Mandrake Linux Security Advisory : Zope (MDKSA-2000:035)

A problem exists in the Zope package with the getRoles method of user objects contained in the default UserFolder implementation. Users with the ability to edit DTML could arrange to give themselves extra roles for the duration of a single request by mutating the roles list as a part of the reque...

Mandrake Linux Security Advisory : cvsweb (MDKSA-2000:019)

Cvsweb contains a hole that provides attackers who have write access to a cvs repository with shell access. Thus, attackers who have write access to a cvs repository but not shell access can obtain a shell. In addition, anyone with write access to a cvs repository that is viewable with cvsweb can...

Mandrake Linux Security Advisory : lpr (MDKSA-2003:059)

A buffer overflow was discovered in the lpr printer spooling system that can be exploited by a local user to gain root privileges. This can be done even if the printer is configured properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

Mandrake Linux Security Advisory : emacs (MDKSA-2000:088)

A vulnerability exists in Emacs 20.6 and prior that allows any user on a multiuser system to eavesdrop on, or forge responses to, an Emacs client. The vulnerability stems from Emacs' failure to properly set permissions for slave PTY devices. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Mandrake Linux Security Advisory : gpm (MDKSA-2000:002)

A security bug was found in gpm-root; the bug can be exploited to provide local users with root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory MDKSA-2000:002. The text itself ...

Mandrake Linux Security Advisory : sudo (MDKSA-2001:024-1)

A buffer overflow exists in the sudo program which could be used by an attacker to obtain higher privileges. sudo is a program used to delegate superuser privileges to ordinary users and only for specific commands. Update : The sudo package for 7.1 used the system-auth facility of newer pam...

Mandrake Linux Security Advisory : inn (MDKSA-2000:016)

A vulnerability exists when verifycancels is enabled in /etc/news/inn.conf. This vulnerability could be used to gain root access on any system with inn installed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandra...

Mandrake Linux Security Advisory : tcsh (MDKSA-2000:069)

A vulnerability exists with tcsh when using the in-here documents with the syntax. When doing this, tcsh uses a temporary file to store the data. Unfortunately, the temporary file is not created securely and standard symlink attacks can be used to make tcsh overwrite arbitrary files. %NASLMINLEVE...

Mandrake Linux Security Advisory : fdutils (MDKSA-2000:005)

A vulnerability in fdmount will allow any user to exploit a buffer overflow. This user, when he is in the floppy group, can have a root access on the machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake...

Mandrake Linux Security Advisory : apache (MDKSA-2000:060-2)

The Apache web server comes with a module called modrewrite which is used to rewrite URLs presented by the client prior to further processing. There is a flaw in the modrewrite logic that allows an attacker to view arbitrary files on the server system if they contain regular expression references...

Mandrake Linux Security Advisory : dump (MDKSA-2000:018)

There was the potential for a buffer overflow exploit in the restore program. This new version fixes this possible vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory...