[SECURITY] [DSA-111-2] Update for SNMP security fix

Package : ucd-snmp Problem type : ABI/API correction to previous security fix Debian-specific: yes Some of the changes made in the DSA-111-1 security fix for SNMP changed the API and ABI for the SNMP library which broke some other applications. This has been fixed in version 4.1.1-2.1. We apologi...

Eterm SGID utmp Buffer Overflow (Local)

I found this last night looking for suids to overflow. Tested on Debian PowerPC Unstable. Yields gid utmp from which higher priveleges could be gained with a little effort. I haven't looked too close but I think the overflow might be in imlib2. -core@euclid:/home/core/tmp gcc execve.c -o execve...

[SECURITY] [DSA 081-2] No w3m packages for powerpc available

-------------------------------------------------------------------------- Debian Security Advisory DSA 081-2 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2001 - -------------------------------------------------------------------------- Packages : w3m, w3m-ssl...

[SECURITY] [DSA-032-2] proftp runs as root, /var symlink removal

Package: proftpd Vulnerability: proftpd running as root, /var symlink removal Debian-specific: yes This is an update to the DSA-032-1 advisory. The powerpc package that was listed in that advisory was unfortunately compiled on the wrong system which caused it to not work on a Debian GNU/Linux 2.2...

[SECURITY] [DSA 031-2] New sudo packages for powerpc available

---------------------------------------------------------------------------- Debian Security Advisory DSA-031-2 [email protected] http://www.debian.org/security/ Martin Schulze March 6, 2001 - ---------------------------------------------------------------------------- Package : sudo...

[SECURITY] [DSA 011-2] New mgetty packages for m68k and powerpc available

---------------------------------------------------------------------------- Debian Security Advisory DSA-011-2 [email protected] http://www.debian.org/security/ Martin Schulze March 6, 2001 - ---------------------------------------------------------------------------- Package : mgetty...

Lots and lots of fun with rpc.statd

Last week was a little quiet, so I thought I'd throw some kindling on the fire. Here's another prime example of a format string bug: our old friend rpc.statd. Attached is an exploit. The offsets are for Linux/PowerPC, Debian 2.2. It isn't functional, though - and it's more than just kiddy-proofed...

[SECURITY] New Debian nfs-common packages released

Package: nfs-common from nfs-utils Vulnerability: remote root exploit Debian-specific: no The version of nfs-common distributed in Debian GNU/Linux 2.2 a.k.a potato, as well as in the unstable woody distribution, is vulnerable to a remote root compromise. No exploit is known to exist in the wild,...

PT-2004-3658 · Debian +3 · Debian +3

Name of the Vulnerable Software and Affected Versions: usbvision-kmp-default versions affected versions not specified usbvision-kmp-bigsmp versions affected versions not specified usbvision-kmp-xenpae versions affected versions not specified usbvision-kmp-xen versions affected versions not...

PT-2004-3722 · Linux · Kernel-Image-2.4.19-Sun4U +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.4.26 Linux kernel versions prior to 2.6.6 aa-sources versions prior to 2.4.23-r2 kernel-image-2.4.18-powerpc-xfs version kernel-image-2.4.18-sun4u version kernel-image-2.4.18-sun4u-smp version...