[SECURITY] New Debian xmcd packages released

Package: xmcd Vulnerability: untrustworthy privileged binaries Debian-specific: yes Vulnerable: yes The Debian GNU/Linux xmcd package has historically installed two setuid helpers for accessing cddb databases and SCSI cdrom drives. More recently, the package offered the administrator the chance t...

[SECURITY] New Debian ncurses packages released

Package: ncurses Vulnerability: local privilege escalation Debian-specific: no Vulnerable: yes The version of the ncurses display library shipped with Debian GNU/Linux 2.2 is vulnerable to several buffer overflows in the parsing of terminfo database files. This problem was discovered by Jouko...

[SECURITY] New Debian ncurses packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 21, 2000 - ---------------------------------------------------------------------------- Package: ncurses...

[SECURITY] New Debian xmcd packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 21, 2000 - ---------------------------------------------------------------------------- Package: xmcd Vulnerability:...

Security Advisory: FreeBSD-SA-00:68.ncurses

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:68 Security Advisory FreeBSD, Inc. Topic: ncurses allows local privilege escalation Category: core Module: ncurses Announced: 2000-11-13 Affects: FreeBSD 5.0-CURRENT, 4.x...

FreeBSD-SA-00:68.ncurses

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:68 Security Advisory FreeBSD, Inc. Topic: ncurses allows local privilege escalation REVISED Category: core, ports Module: ncurses Announced: 2000-11-13 Revised: 2000-11-2...

ncurses-overflow.txt

OVERVIEW The CRT screen handling library ncurses contains buffer overflows, making programs using it vulnerable. If the programs are setuid or setgid, a local user may elevate their privilege. The problem exists in ncurses versions 4.2 and 5.0, probably earlier, and libocurses. The overflows can ...

Переполнение буфера в ncurses

Переполнение буфера в библиотеке ncurses при разборе переменной среды TERMCAP...

ncurses buffer overflows

OVERVIEW The CRT screen handling library ncurses contains buffer overflows, making programs using it vulnerable. If the programs are setuid or setgid, a local user may elevate their privilege. The problem exists in ncurses versions 4.2 and 5.0, probably earlier, and libocurses. The overflows can ...

Дырка в ncurses под FreeBSD 3

Переполнение буфера в библиотеке libmytinfo при разборе TERMCAP...

Security Advisory: FreeBSD-SA-00:17.libmytinfo

============================================================================= FreeBSD-SA-00:17 Security Advisory FreeBSD, Inc. Topic: Buffer overflow in libmytinfo may yield increased privileges with third-party software. Category: core Module: libmytinfo Announced: 2000-05-09 Affects: FreeBSD 3....

FreeBSD-SA-00:17.libmytinfo

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:17 Security Advisory FreeBSD, Inc. Topic: Buffer overflow in libmytinfo may yield increased privileges with third-party software. Category: core Module: libmytinfo...

RedHat Linux 6.0 Slackware Linux 4.0 - Termcap tgetent() Local Buffer Overflow (1)

RedHat Linux 6.0 Slackware Linux 4.0 - Termcap tgetent Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/588/info A buffer overflow existed in libtermcap's tgetent function, which could cause the user to execute arbitrary code if they were able to supply their own termcap file...

RedHat Linux 6.0 Slackware Linux 4.0 - Termcap tgetent() Local Buffer Overflow (2)

RedHat Linux 6.0 Slackware Linux 4.0 - Termcap tgetent Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/588/info A buffer overflow existed in libtermcap's tgetent function, which could cause the user to execute arbitrary code if they were able to supply their own termcap file...

[SECURITY] New versions of ncurses fixes security problem

We have received a report that using ncurses in setuid programs will give the user a way to open arbitrary files. We recommend you upgrade your ncurses3.4-dev package immediately. dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.0 alias hamm This version of Debian were releas...

[SECURITY] New versions of ncurses fixes security problem

We have received a report that using ncurses in setuid programs will give the user a way to open arbitrary files. We recommend you upgrade your ncurses3.4-dev package immediately. dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.0 alias hamm ------------------------------- Th...

PT-2002-3169 · Debian · Debian

Name of the Vulnerable Software and Affected Versions: ncurses version 5.0 ncurses4 compatibility package affected versions not specified Description: The issue is related to a buffer overflow in routines for moving the physical cursor and scrolling, allowing local users to gain privileges...