Mandrake Linux Security Advisory : mod_perl (MDKSA-2000:046)

The configuration file, /etc/httpd/conf/addon-modules/modperl.conf contained an Options directive that was not entirely secure and allowed people to browse the /perl/ directory. This update adds the '-Indexes' directive to the Options command, thus making the directory non- browseable...

Mandrake Linux Security Advisory : gnupg (MDKSA-2000:063-1)

A problem exists in all versions of GnuPG prior to and including 1.0.3. Because of this problem, GnuPG may report files which have been signed with multiple keys one or more of which may be incorrect to be valid even if one of the signatures is in fact valid. Update : The previous packages...

Mandrake Linux Security Advisory : Mesa (MDKSA-2001:029)

Ben Collins identified a temporary file race in the Utah-glx component of the Mesa package which affects Linux-Mandrake 7.2. The /tmp/glxmemory file is created by Utah-glx and because it is not created securely could be used in a symlink attack which allows files to be overwritten the next time t...

Mandrake Linux Security Advisory : Zope (MDKSA-2000:043)

The exploit that was not fixed with the previous Zope hotfix involves the getRoles method of user objects contained in the default UserFolder implementation returning a mutable Python type. Because the mutable object is still associated with the persistent User object, users with the ability to...

Mandrake Linux Security Advisory : nmh (MDKSA-2000:000)

The nmh package contains a security bug in MIME headers parsing which can be exploited to trick mhshow into executing arbitrary shell code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security...

Mandrake Linux Security Advisory : xlockmore (MDKSA-2000:011)

Xlock is an X11 utility used to lock X-Window displays until the password of the user running X is entered correctly. Of course, in order to perform the password-check xlock must be setuid root and have access to the shadowed passwd file. In the xlockmore distributions versions prior to 4.16.1, a...

Mandrake Linux Security Advisory : perl-Digest-MD5 (MDKSA-2002:035)

A bug exists in the UTF8 interaction between the perl-Digest-MD5 module and perl that results in UTF8 strings having improper MD5 digests. The 2.20 version of the module corrects this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandrake Linux Security Advisory : netscape (MDKSA-2000:080)

A buffer overflow exists in the HTML parser code of the Netscape web browser in all versions prior to and including 4.75. This buffer overflow can be exploited by a remote attacker or web site. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandrake Linux Security Advisory : Zope (MDKSA-2001:025)

A new Hotfix for Zope has been released that fixes a very important security issue that affects all versions of Zope prior to and including 2.3.1b1. Users can use through-the-web scripting capabilities on a Zope site to view and assign class attributes to ZClasses, possibly allowing them to make...

Mandrake Linux Security Advisory : tetex (MDKSA-2005:044)

Previous updates to correct integer overflow issues affecting xpdf overlooked certain conditions when built for a 64 bit platform. formerly CVE-2004-0888. This also affects applications like tetex, that use embedded versions of xpdf. The updated packages are patched to deal with these issues...

Mandrake Linux Security Advisory : getty_ps (MDKSA-2001:004)

WireX discovered a potential temporary file race condition in the gettyps program. This update corrects the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory MDKSA-2001:004. The...

Mandrake Linux Security Advisory : joe (MDKSA-2001:026)

The joe text editor looks for configuration files in the current working directory, the user's home directory, and finally in /etc/joe. A malicious user could create their own .joerc configuration file and attempt to get other users to use it. If this were to happen, the user could potentially...

Mandrake Linux Security Advisory : xemacs (MDKSA-2000:006)

From the Caldera advisory : under some circumstances, users are able to snoop on other users' keystrokes. This is a serious problems if you use modules that require e.g. input of passwords, such as MailCrypt. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandrake Linux Security Advisory : cups (MDKSA-2001:020-1)

A problem exists in all versions of CUPS prior to 1.1.5 with the httpGets function. It could go into an infinite loop if a line longer than the input buffer size was sent by a client. This could be used as a DoS attack. As well, all occurances of sprintf calls were changed to snprintf, and all...

Mandrake Linux Security Advisory : bind (MDKSA-2000:067)

A vulnerability exists with the bind nameserver dealing with compressed zone transfers. This vulnerability can be exploited by authorized zone transfers and used in a DoS attack. The named daemon will crash if it receives this type of zone transfer from an authorized source address. The crash is...

Mandrake Linux Security Advisory : traceroute (MDKSA-2000:053)

There is a bug in the traceroute program which causes segfaults and which could potentially be exploited to provide root privilege because the traceroute command is suid root. There are no known exploits currently, but users are encouraged to upgrade. %NASLMINLEVEL 70300 C Tenable Network Securit...

Mandrake Linux Security Advisory : sysklogd (MDKSA-2000:050-1)

A problem exists with the kernel logging daemon klogd in the sysklogd package. A 'format bug' makes klogd vulnerable to local root compromise, as well as the possibility for remote vulnerabilities under certain circumstances, which are unprobable. There is also a more probable semi-remote exploit...

Mandrake Linux Security Advisory : mod_php3 (MDKSA-2000:048)

"A problem exists with PHP3 and PHP4 scripts regarding RFC 1867-based file uploads. PHP saves uploaded files in a temporary directory on the server, using a temporary name that is referenced as the variable $FOO where 'FOO' is the name of the file input tag in the submitted form. Many PHP scripts...

Mandrake Linux Security Advisory : linuxconf (MDKSA-2001:011)

WireX discovered a potential temporary file race problem in the vpop3d program in the linuxconf package. This update corrects the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Adviso...

Mandrake Linux Security Advisory : BitchX (MDKSA-2000:017)

A denial of service vulnerability exists in BitchX. Improper handling of incoming invitation messages can crash the client. Any user on IRC can send the client an invitation message that causes BitchX to segfault. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...