New DHCP packages available

...

[RHSA-2002:205-15] New kernel fixes local security issues

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel fixes local security issues Advisory ID: RHSA-2002:205-15 Issue date: 2002-09-20 Updated on: 2002-10-15 Product: Red Hat Linux Keywords: Cross references: Obsoletes:...

CVE-2002-0971

CVE-2002-0971 affects VNC, TightVNC, and TridiaVNC. Local users can run arbitrary code as LocalSystem by abusing the Win32 Messaging System to bypass the VNC GUI and reach the "+Add new clients+" dialogue box. Root cause indicated by vendor descriptions is access through GUI-bypass via messaging ...

wbbboard 1.1.1 registration _new_users_vulnerability_

wbbboard 1.1.1 registration newusersvulnerability -------------------------------------------------- wbbboard : i cant find any contact info in credits : i send a message to wbbhacks.de and mywbb.de support forums, they didnt reply for 3 days i think enough Affected program : wbbboard 1.1.1 Vendo...

AdCycle SQL Command Insertion Vulnerability - qDefense Advisory Number QDAV-2001-7-2

AdCycle SQL Command Insertion Vulnerability qDefense Advisory Number QDAV-2001-7-2 Product: AdCycle Vendor: AdCyle http://adcycle.com Severity: Remote; Attacker may gain AdCycle administrator status Versions Affected: Versions up to and including 1.15 Vendor Status: Vendor contacted; has released...

[SECURITY] [DSA-048-2] samba for sparc was incorrectly built

Package : samba Problem type : recompile of sparc packages Debian-specific: yes The updated samba packages that were mentioned in DSA-048-1 were unfortunately compiled incorrectly: the stable chroot we used turned out to be running unstable instead. A new package with version 2.0.7-3.2.1 have bee...

[SECURITY] [DSA-031-1] New version of sudo released

Package: sudo Vulnerability: buffer overflow Debian-specific: no Todd Miller announced a new version of sudo which corrects a buffer overflow that could potentially be used to gain root privilages on the local system. The fix from sudo 1.6.3p6 is available in sudo 1.6.2p2-1potato1 for Debian 2.2...

Response to ProFTPD issues

======= Summary ======= Three issues with the ProFTPD FTP server have been reported to BUGTRAQ in the past month. These issues have been addressed by the ProFTPD core team. The following vulnerabilities are addressed in this advisory: 1. "SIZE memory leak"...

The Bat! version 1.49

We would like to inform you that version 1.49 is now released. It contains some important security fixes so we recommend you to download it as soon as you can if you use The Bat! as your primary e-mail client. What's new in The Bat! 1.49? Legend: since 1.48 + Added feature Improved/changed featur...

Linux news 14.12.00

Ядро 2.2.18 Наконец-то вышло следующее стабильное ядро из ветки 2.2. Подробнее: http://www.kernel.org/pub/linux/kernel/v2.2/linux-2.2.18.log Linux Kernel 2.4.0-test12 is out Вышла новая тестовая версия ядра линух 2.4.0 Подробнее: http://dredd.crimea.edu/linuxnews/test12.txt Ядро 2.4.0-test13-pre1...

Poll It CGI 2.0 - Multiple Vulnerabilities

Poll It CGI 2.0 - Multiple Vulnerabilities !/usr/bin/perl Poll It CGI v2.0 exploit keelis/havoc korp 2000 shouts to modjo, p, zen, kd, ab, all the script kiddies. keelisathushmaildotcom use Socket; $host, $cgiloc = @ARGV0,1; $ip=inetaton$host; print"\n\t+--- Poll It CGI v2.0 exploit ---+";...

Poll It CGI 2.0 - Multiple Vulnerabilities

!/usr/bin/perl Poll It CGI v2.0 exploit keelis/havoc korp 2000 shouts to modjo, p, zen, kd, ab, all the script kiddies. keelisathushmaildotcom use Socket; $host, $cgiloc = @ARGV0,1; $ip=inetaton$host; print"\n\t+--- Poll It CGI v2.0 exploit ---+"; print"\n\t+--- keelis/havoc korp 2000 ---+\n\n\n"...

Linux news 13.09.00

2.2.18pre6 Похоже, Кокс решил закончить пятилетку за три года. Что ни день, то новая пре-версия стабильной ветки. Пофиксил несколько глупых багов, добавил несколько небольших фиксов, не компилируется только поддержка AGP. Похоже, Кокс готовится к большому прыжку. NFS? Подробнее:...

Linux News 29.08.00

Linux Kernel pre-patch 2.4.0 test8-pre1 Первый пререлиз восьмого тестового ядра Linux - Linux Kernel 2.4.0. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Kernel Traffic 82 Очередной Kernel Traffic за номером 82. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-08-29-010-06-OS-KN...

Re: [SECURITY] New version of canna released.

Mail received...

Re: [SECURITY] New version of canna released.

Mail received...

nhc.kp.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII ,=wwmmm=, .,=""" "M ,gP" "& M & ,d" M, ,R "k ,P "k F W , Vk W '$ ,W M ,F M $ M J$ ,,,====,,, ,,,gP g'gM|| "MMw"""""" gP M@ k @ M@ MX5""""mP, || %,""ww==g' M 4k "" "MmwP , k &...

Linux news 03.05.00

Linux 2.0.39pre4 Вышла новая pre-версия следующего ядра Linux из старой стабильной серии: Linux 2.0.39pre4. Список изменений состоит из исправлений различных ошибок предыдущей версии. Подробнее: http://linuxtoday.com/stories/21020.html Phrack 56 Read Online:...

Linux news 18.04.00

Linux Kernel 2.2.15pre19 Вышел очередной, девятнадцатый по счету, пререлиз нового стабильного ядра Linux Kernel 2.2.15. Подробнее:http://kernelnotes.org/lnxlists/linux-kernel/lk000403/msg00193.html QPopper 3.0 Вышла новая версия POP3 сервера для Unix. В ней добавлена поддержка PAM, RFC 2449,...

Web Server Directory Traversal Arbitrary File Access

It appears possible to read arbitrary files on the remote host outside the web server's document directory using a specially crafted URL. An unauthenticated attacker may be able to exploit this issue to access sensitive information to aide in subsequent attacks. Note that this plugin is not limit...