[SECURITY] [DSA-059-1] man-db symlink attack

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-059-1 [email protected] http://www.debian.org/security/ Wichert Akkerman June 12, 2001 -...

RIT Research Labs The Bat! does not properly parse <CR> characters not followed by a <LF> character

Overview Due to a problem parsing carriage return/line feeds in RFC822 format mail messages, The Bat! mail client may permaturely detect the end of a mail message, causing an error to occur. This error may prevent the mail user from retrieving other mail messages until the message with the error ...

Символьные линки в InoculateIT &#40;symbolic link&#41;

Проблема символьных линков при загрузке обновлений...

[RHSA-2001:058-04] Updated mount package available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated mount package available Advisory ID: RHSA-2001:058-04 Issue date: 2001-04-25 Updated on: 2001-05-02 Product: Red Hat Linux Keywords: mount swapon swap permissions Cross...

Дырка в Mandrake &#40;rpmdrake symbolic link&#41;

Проблема символьных линков в rpmdrake...

AGAIN: Tested on Windows 98 with &#39;free&#39; Opera 5.02 Build 856a &#40;No Java Runtime Environment installed&#41;

Thursday, 19 April, 2001 There is an interesting oddity with the 'free' Opera 5.02 Build 856a No Java Runtime Environment installed on Windows 98 with downloading files. In particular .exe. While the array of file type associations and instructions what to do with them is wide, the instruction se...

Проблема в The Bat! &#40;&lt;CR&gt; handling&#41;

Некорректная обработка символов 0x0D CR не закрытых символами 0x0A LF ввода POP3-сервера приводит к тому, что часть письма воспринимается как ответ сервера, что приводит к невозможности получения последующих писем с сервера...

QPC FTPd Directory Traversal and BoF Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= QPC FTPd Directory Traversal and BoF Vulnerabilities =- Release date: Saturday, April 14, 2001 Introduction: QPC's ftpd is the ftp server component of the company's QVT/NET and QVT/Term software suites for MS Windows. The ftpd and the rest ...

flaw in RH &#96;&#96;mkpasswd&#39;&#39; command

Hey, The mkpasswd password generator that ships in the expect'' package of at least RedHat 6.2 generates only a relatively small number 2^15 for the default password length of passwords. Presumably this is a result of trying to apply too many rules of what is a good'' password to the generation...

Ultimate Bulletin Board Version 5.47e

About: "Ultimate Bulletin Board Version 5.47e" by "www.infopop.com" on Cross-Platform tested on UNIX Subject: Another possibility to read in private forums Status: Vendors took aknoledgement; No reply of any solution yet; Details: As still known, there've been some security problem in UBB up to...

BinTec X4000 Access Router DoS Vulnerability

BinTec X4000 locks up after nmap -sS portscan The BinTec X4000 is a mid-sized multi-purpose, multi-protocol router meant to fit the needs of small to medium companies. Unfortunately, it has a bit of a problem. A simple nmap SYN scan nmap -sS will cause the machine to lock up completely. It can...

[RHSA-2001:008-02] Updated vim packages available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated vim packages available Advisory ID: RHSA-2001:008-02 Issue date: 2001-01-29 Updated on: 2001-03-21 Product: Red Hat Linux Keywords: vim vim-enhanced stl status line Cros...

[SECURITY] [DSA 038-1] New version of sgml-tools available

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-038-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8, 2001 -...

[SECURITY] [DSA-032-1] proftp runs as root, /var symlink removal

Package: proftpd Vulnerability: proftpd running as root, /var symlink removal Debian-specific: yes The following problems have been reported for the version of proftpd in Debian 2.2 potato: 1. There is a configuration error in the postinst script, when the user enters yes, when asked if anonymous...

WebSphere - Minor CSS Issue.

Hi folks, Something i came across while testing some of our WebSphere installations these have been fixed in the current versions of vanilla Apache, so i assume these are just an inherited problem from the old Apache codebase.. Makes you wonder what else there is? :^ Retreiving:...

Проблемы с crontab &#40;symlink&#41;

Проблема символьных линков при использовании crontab -e Можно прочитать любой файл. В FreeBSD - любой начинающийся с символа...

UltraBoard cgi directory permission problem

Hacksware Bug Report 1. Name: UltraBoard cgi directory permission problem 2. Release Date: 2001.1.12 3. Affected Application: UltraBoard 2000 Personal Edition Version 2.11 http://www.ub2k.com/downloads/UB211PEB1.zip 4. Author: [email protected] 5. Type: Configuration Error 6. Explanation In defau...

Проблема с PGP

При разборе подписаных ключей не сверяется соответствие ключа сигнатуре...

Дырка в ksh

Проблема при создании временных файлов при перенаправлении ввода аналогична sh, tcsh bash и др...

Oops Proxy Server 1.4.22 - Remote Buffer Overflow (1)

Oops Proxy Server 1.4.22 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/2099/info Oops is a freely available proxy server package, written by Igor Khasilev. A problem exists in the package which could allow for the arbitrary execution of code. Multiple buffer overflows...