Mandrake Linux Security Advisory : netpbm (MDKSA-2004:011-1)

A number of temporary file bugs have been found in versions of NetPBM. These could allow a local user the ability to overwrite or create files as a different user who happens to run one of the the vulnerable utilities. Update : The patch applied made some calls to the mktemp utility with an...

Mandrake Linux Security Advisory : openssh (MDKSA-2001:092)

The new OpenSSH 3.0.2 fixes a vulnerability in the UseLogin option. By default, Mandrake Linux does not enable UseLogin, but if the administrator enables it, local users are able to pass environment variables to the login process. This update also fixes a security hole in the KerberosV support th...

Mandrake Linux Security Advisory : glibc (MDKSA-2004:009)

A read buffer overflow vulnerability exists in the resolver code in versions of glibc up to and including 2.2.5. The vulnerability is triggered by DNS packets larger than 1024 bytes, which can cause an application to crash. The updated packages have a patch applied to correct the problem...

Mandrake Linux Security Advisory : ethereal (MDKSA-2003:051)

A vulnerability was discovered in Ethereal 0.9.9 and earlier that allows a remote attacker to use specially crafted SOCKS packets to cause a denial of service DoS and possibly execute arbitrary code. A similar vulnerability also exists in the NTLMSSP code in Ethereal 0.9.9 and earlier, due to a...

Mandrake Linux Security Advisory : dhcp (MDKSA-2003:007)

Several potential vulnerabilities were detected by the ISC Internet Software Consortium in their dhcp server software. The vulnerabilities affect the minires library and may be exploitable as stack buffer overflows, which could lead to remote code execution. All Mandrake Linux users are encourage...

Mandrake Linux Security Advisory : lftp (MDKSA-2003:116)

A buffer overflow vulnerability was discovered by Ulf Harnhammar in the lftp FTP client when connecting to a web server using HTTP or HTTPS and using the 'ls' or 'rels' command on specially prepared directory. This vulnerability exists in lftp versions 2.3.0 through 2.6.9 and is corrected upstrea...

Mandrake Linux Security Advisory : gtk+ (MDKSA-2001:061-1)

A vulnerability exists with the GTK+ toolkit in that the GTKMODULES environment variable allows a local user to enter a directory path to a module that does not necessarily need to be associated with GTK+. With this, an attacker could create a custom module and load it using the toolkit which cou...

Mandrake Linux Security Advisory : xinetd (MDKSA-2001:076)

An audit has been performed on the xinetd 2.3.0 source code by Solar Designer for many different possible vulnerabilities. The 2.3.1 release incorporated his patches into the xinetd source tree. The audit was very thorough and found and fixed many problems. This xinetd update includes his audit...

Mandrake Linux Security Advisory : python (MDKSA-2002:082-1)

A vulnerability was discovered in python by Zack Weinberg in the way that the execvpe method from the os.py module uses a temporary file name. The file is created in an unsafe manner and execvpe tries to execute it, which can be used by a local attacker to execute arbitrary code with the privileg...

Mandrake Linux Security Advisory : libneon (MDKSA-2004:049)

It was discovered that in portions of neon, sscanf is used in an unsafe manner. This will result in an overflow of a static heap variable. The updated packages provide a patched libneon to correct these problems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

Mandrake Linux Security Advisory : slocate (MDKSA-2004:004)

A vulnerability was discovered by Patrik Hornik in slocate versions up to and including 2.7 where a carefully crafted database could overflow a heap-based buffer. This could be exploited by a local user to gain privileges of the 'slocate' group. The updated packages contain a patch from Kevin...

Fedora Core 2 : sox-12.17.4-4.fc2 (2004-244)

Updated sox packages that fix buffer overflows in the WAV file handling code are now available. Buffer overflows existed in the parsing of WAV file header fields. It was possible that a malicious WAV file could have caused arbitrary code to be executed when the file was played or converted. Note...

alternate samba package for Slackware 10.0

It was pointed out that the new Samba packages for Slackware 10.0 and -current have a dependency on libattr.so that wasn't in the previous packages. Since it's not the intent to introduce new requirements in security patches especially for stable versions, an alternate version of the samba packag...

Fedora Core 2 : ethereal-0.10.3-2.2 (2004-172)

These new packages fix a bug in the last errata where the actual security patch didn't get applied. All users of ethereal are strongly recommended to update to these latest packages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

[SECURITY] [DSA 530-1] New l2tpd packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 530-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 528-1] New ethereal packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 528-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...

DSA-529 netkit-telnet-ssl - format string

Bulletin has no description...

RHEL 2.1 : mailman (RHSA-2004:156)

An updated mailman package that closes a DoS vulnerability in mailman introduced by RHSA-2004:019 is now available. Mailman is a mailing list manager. On February 19 2004, Red Hat issued security erratum RHSA-2004:019 to correct a DoS Denial of Service vulnerability where an attacker could send a...

RHEL 2.1 : ghostscript (RHSA-2003:182)

A ghostscript package fixing a command execution vulnerability is now available. GNU Ghostscript is an interpreter for the PostScript language, and is often used when printing to printers that do not have their own built-in PostScript interpreter. A flaw has been discovered in the way Ghostscript...

RHEL 2.1 : ddskk (RHSA-2003:242)

Updated ddskk packages which fix a temporary file security issue are now available. Daredevil SKK is a simple Kana to Kanji conversion program, an input method of Japanese for Emacs. ddskk does not take appropriate security precautions when creating temporary files. This bug could potentially be...