Mandrake 6.x,RedHat 6.x,Turbolinux 3.5 b2/4.x/6.0.2 userhelper/PAM Path Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/913/info Because of double path vulnerabilities in the binary userhelper and PAM, it is possible to get root locally on RedHat 6.0 and 6.1 systems. Both userhelper and PAM follow .. paths and userhelper allows you to...

Mandrake 6.1/7.0/7.1 /perl http Directory Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1678/info The default configuration files for versions of modperl shipped with Mandrake Linux 6.1 through 7.1 contain a misconfiguration that can be a security concern in some situations. The /perl directory is part of th...

Mandrake Linux Security Advisory : openldap (MDKSA-2000:003)

OpenLDAP follows symbolic links when creating files. The default location for these files is /usr/tmp, which is a symlink to /tmp, which in turn is a world-writable directory. Local users can destroy the contents of any file on any mounted filesystem. %NASLMINLEVEL 70300 C Tenable Network Securit...

Mandrake Linux Security Advisory : xpdf (MDKSA-2005:043)

Previous updates to correct integer overflow issues affecting xpdf overlooked certain conditions when built for a 64 bit platform. formerly CVE-2004-0888. This also affects applications that use embedded versions of xpdf. The updated packages are patched to deal with these issues. %NASLMINLEVEL...

Mandrake Linux Security Advisory : php (MDKSA-2001:013)

There are two security problems with php4 as shipped in Linux-Mandrake 7.2. It is possible to specify PHP directives on a per-directory basis under Apache and a remote attacker could carefully craft an HTTP request that would cause the next page to be served with the wrong values for these...

Mandrake Linux Security Advisory : ncurses (MDKSA-2001:052)

An overflowable buffer in the part of the ncurses library that handles cursor movement existed in versions of ncurses prior to 5.2. Attackers could force a privileged application to use their own termcap file containing a special terminal entry which would trigger the overflow, allowing them to...

Mandrake Linux Security Advisory : kdesu (MDKSA-2000:008)

A vulnerability in kdesud will allow any user to exploit a buffer overflow. This user then can have a root group access on the machine, by exploiting a bug in the kdesud program. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandrake Linux Security Advisory : kernel (MDKSA-2001:037)

A number of security problems have been found in the Linux kernels prior to the latest 2.2.19 kernel. Following is a list of problems based on the 2.2.19 release notes as found on http://www.linux.org.uk/ - binfmtmisc used user pages directly - the CPIA driver had an off-by-one error in the buffe...

Mandrake Linux Security Advisory : ed (MDKSA-2000:076)

Alan Cox discovered that GNU ed a classed line editor tool creates temporary files unsafely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory MDKSA-2000:076. The text itself is copyrigh...

Mandrake Linux Security Advisory : arpwatch (MDKSA-2001:002)

WireX discovered a potential temporary file race condition in the arpwatch program. This problem has been corrected in arpwatch version 2.1a10. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security...

Mandrake Linux Security Advisory : licq (MDKSA-2001:032-1)

Versions of Licq prior to 1.0.3 have a vulnerability involving the way Licq parses received URLs. The received URLs are passed to the web browser without any sanity checking by using the system function. Because of the lack of checks on the URL, remote attackers can pipe other commands with the...

Mandrake Linux Security Advisory : Zope (MDKSA-2000:083)

There is an issue involving security registration of 'legacy' names for certain object constructors such as the constructors for DTML Method Objects. Security was not being applied correctly for the legacy names, making it possible to call those constructors without the permissions that should ha...

Mandrake Linux Security Advisory : imwheel (MDKSA-2000:001)

A security bug was found in imwheel; the bug can be exploited to provide local users with root access. Version 0.9.8 fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory...

Mandrake Linux Security Advisory : mod_php3 (MDKSA-2000:062)

PHP version 3 which ships with Linux-Mandrake are vulnerable to format string attacks due to logging functions that make improper use of the syslog and vsnprintf functions. This renders PHP3-enabled servers vulnerable to compromise by remote attackers. This attack is only effective on PHP...

Mandrake Linux Security Advisory : xlockmore (MDKSA-2000:038)

A bug exists in previous versions of xlockmore with display name passing '%d' as the display name. This bug is corrected in this version. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisor...

Mandrake Linux Security Advisory : slrn (MDKSA-2001:028)

A buffer overflow exists in versions of the slrn news reader prior to 0.9.6.3pl4 as reported by Bill Nottingham. This problem exists in the wrapping/unwrapping functions and a long header in a message might overflow a buffer which could result in execution of arbitrary code encoded in the message...

Mandrake Linux Security Advisory : Zope (MDKSA-2000:086)

A potential security issue exists in versions of Zope up to and including 2.2.4. This issue involves incorrect protection of a data updating method on Image and File objects. Because the method was not correctly protected, it was possible for users with DTML editing privileges to update the raw...

Mandrake Linux Security Advisory : wu-ftpd (MDKSA-2000:014)

Wu-ftpd is vulnerable to a very serious remote attack in the SITE EXEC implementation. Because of user input going directly into a format string for a printf function, it is possible to overwrite important data, such as a return address, on the stack. When this is accomplished, the function can...

Mandrake Linux Security Advisory : xinetd (MDKSA-2002:053)

A vulnerability was discovered by Solar Designer in xinetd. File descriptors for the signal pipe that were introduced in version 2.3.4 are leaked into services started by xinetd, which can then be used to talk to xinetd, resulting in a crash of xinetd. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : timed (MDKSA-2001:034)

The time server daemon, timed, tries to synchronize the local host time with the time of other machines on a local area network. A bug in timed, as reported by the FreeBSD Security Officer, that could be triggered remotely can crash the time server daemon. %NASLMINLEVEL 70300 C Tenable Network...