[SECURITY] [DSA-131-1] Apache chunk handling vulnerability

Package : apache Problem type : remote DoS / exploit Debian-specific: no CVE name : CAN-2002-0392 CERT advisory : VU944335 Mark Litchfield found a denial of service attack in the Apache web-server. While investigating the problem the Apache Software Foundation discovered that the code for handlin...

CVE-2001-0912

Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges...

Проблемы с libdb в Open Linux (packaging error)

Переполнение буфера при вызове определенных функций библиотеки...

suid xman 3.1.6 overflows

xman from at least X11R6-contrib-3.3.2-3.i386.rpm suffers from a classic overflow [email protected] is noted as the packager of this RPM. I do not know the author. root@linux lib ls -al which xman -rwxr-sr-x 1 root man 41076 Jun 17 1998 /usr/X11R6/bin/xman root@linux lib xman root@linux li...

Security Update: [CSSA-2001-SCO.5] UnixWare: packaging tool exploits

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare: packaging tool exploits Advisory number: CSSA-2001-SCO.5 Issue date: 2001 June 29 Cross reference: 1. Problem Description The...

[SECURITY] new version of zope released

Package: zope Vulnerability type: remote unprivileged access Debian-specific: no On versions of Zope prior to 2.2beta1 it was possible for a user with the ability to edit DTML can gain unauthorized access to extra roles during a request. Debian 2.1 slink did not include zope, and is not vulnerabl...