CVE-2002-1392

The CVE-2002-1392 issue affects mgetty before 1.1.29, where the faxspool directory is world-writable, allowing local users to modify fax transmission privileges. Public advisories (e.g., RHSA-2003:008 and RHSA-2003:036) document a fixed upgrade path to mgetty 1.1.30 to resolve both the buffer-ove...

CVE-2002-1391

Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument...

CVE-2002-1391

Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Caller ID string with a long CallerName argument...

Mandrake Linux Security Advisory : mgetty (MDKSA-2003:053-1)

Two vulnerabilities were discovered in mgetty versions prior to 1.1.29. An internal buffer could be overflowed if the caller name reported by the modem, via Caller ID information, was too long. As well, the faxspool script that comes with mgetty used a simple permissions scheme to allow or deny f...

RHEL 2.1 : mgetty (RHSA-2003:008)

Updated Mgetty packages are now available to fix a possible buffer overflow and a permissions problem. Mgetty is a getty replacement for use with data and fax modems. Mgetty can be configured to run an external program to decide whether or not to answer an incoming call based on Caller ID...

DEBIAN-CVE-2003-0516

cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...

CVE-2003-0517

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

CVE-2003-0516

cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...

DEBIAN-CVE-2003-0517

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

CVE-2003-0516

cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...

CVE-2003-0517

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

CVE-2003-0516

cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...

CVE-2003-0517

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

CVE-2003-0517

The vulnerability CVE-2003-0517 affects mgetty 1.1.28 and earlier, via the faxrunqd.in component. A symlink attack on JOB files allows local users to overwrite files, compromising file integrity. The issue stems from insufficient protections around JOB file handling, enabling local privilege-impa...

CVE-2003-0516

CVE-2003-0516 affects cnd.c in mgetty 1.1.28 and earlier, where non‑printable characters and quotes are not properly filtered. This may allow remote attackers to execute arbitrary commands via shell metacharacters in the caller ID or caller name strings. Affected product: mgetty (1.1.28 and earli...

CVE-2003-0516

cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute arbitrary commands via shell metacharacters in 1 caller ID or 2 caller name strings...

CVE-2003-0517

faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...

PT-2003-1686 · Mgetty · Mgetty

Name of the Vulnerable Software and Affected Versions: mgetty versions 1.1.28 and earlier Description: The issue allows local users to overwrite files via a symlink attack on JOB files. This is achieved by exploiting the faxrunqd.in component in the affected software. Recommendations: For mgetty...

mgetty multiple bugs

Buffer overflow, weak spool permissions...

[RHSA-2003:036-01] Updated mgetty packages available

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated mgetty packages available Advisory ID: RHSA-2003:036-01 Issue date: 2003-04-08 Updated on: 2003-04-08 Product: Red Hat Linux Keywords: mgetty spool permission Cross references:...