[SECURITY] New version of apcd released

Package: apcd Vulnerability type: symlink attack Debian-specific: no The apcd package as shipped in Debian GNU/Linux 2.1 is vulnerable to a symlink attack. If the apcd process gets a SIGUSR1 signal it will dump its status to /tmp/upsstat. However this file is not opened safely, which makes it a...

WebSite Pro Malformed URL Path Disclosure

It was possible to discover the physical location of a virtual web directory of this host by issuing the command : GET /HTTP1.0/ This can reveal valuable information to an attacker, allowing them to focus their attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] New version of sendmail released

The version of sendmail that was distributed with Debian GNU/Linux 2.1 has a slight problem in the code to regenerate the aliases database. Sendmail allowed any user to run sendmail with the -bi option to reinitialize the aliases database. The user could then interrupt sendmail and leave the syst...

[SECURITY] New version of bind released

The version bind that was distributed in Debian GNU/Linux 2.1 has a vulnerability in the processing of NXT records that can be used by an attacked in a Debian of Service attack or theoretically be exploited to gain access to the server. This has been fixed in version 8.2.5p5-0slink1, and we...

[SECURITY] New version of proftpd fixes remote exploits

The proftpd version that was distributed in Debian GNU/Linux 2.1 had several buffer overruns that could be exploited by remote attackers. A short list of problems: user input was used in snprintf without sufficient checks there was an overflow in the logxfer routine you could overflow a buffer by...

[SECURITY] New version of nfs-server fixes remote exploit

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 11, 1999 - ------------------------------------------------------------------------ The version of nfs-server that was...

[SECURITY] New version of proftpd fixes remote exploits

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 11, 1999 - ------------------------------------------------------------------------ The proftpd version that was...

ISC BIND < 4.9.7-REL / 8.2.2-P5 Multiple Remote Vulnerabilities

The remote BIND server, according to its version number, is vulnerable to several attacks that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10029; scriptversion"1.37"; scriptcvsdate"Date:...

[SECURITY] New version of nis released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman October 28, 1999 - ------------------------------------------------------------------------ The nis package that was distributed...

[SECURITY] New version of amd fixes remote exploit, take 2

The version of amd that was distributed with Debian GNU/Linux 2.1 is vulnerable to a remote exploit. This was fixed in version 23.0slink1. However that fix contained an error which has been fixed in version upl102-23.slink2. Here is the problem description from the previous fix: Passing a big...

[SECURITY] New versions of cron fixes possible root exploit

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze August 30, 1999 ---------------------------------------------------------------------------- Red Hat has recently released a...

[SECURITY] New versions of epic4 fixes possible DoS vulnerability

--------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze August 26, 1999 --------------------------------------------------------------------------- We have received a report from the...

[SECURITY] New versions of smtp-refuser fixes security hole

This bug was experienced in May 1999 but wasnt reported on this channel yet. Former versions of the smtp-refuser package came with unchecked logging facility to /tmp/log. This allowed deleting arbitrary, root-owned files by any user who has write access to /tmp. We recommend you upgrade your...

wide-dhcp.txt

http://www.rootshell.com/ From [email protected] Fri Jul 17 12:47:17 1998 Date: Fri, 17 Jul 1998 19:52:31 +0700 NOVST From: Oleg Safiullin To: [email protected] Subject: wide-dhcp security hole Bug found in OpenBSD port of wide-dhcp /created by me :-/. WIDE DHCP server creates...

webcom.cgi.guestbook.txt

Date: Fri, 9 Apr 1999 20:41:39 +0100 From: Mnemonix To: [email protected] Subject: Webcom's CGI Guestbook for Win32 web servers I reported a while back on Webcom's www.webcom.se CGI Guestbook wguest.exe and rguest.exe having a number of security problems where any text based file o...

irc.services.DoS.txt

Date: Thu, 22 Apr 1999 22:53:42 EDT From: Andy Church To: [email protected] Subject: Bug in Services for IRC Networks 4.2.2 A bug has been found in versions through 4.2.2 of Services for IRC Networks which allows any IRC user to crash the program. The channel service's SET SUCCESSOR command do...

man-db.zsoelim.symlink.txt

Date: Sat, 12 Jun 1999 14:57:37 -0700 From: [email protected] Reply-To: [email protected] Subject: New version of man-db fixes symlink attack in zsoelim -----BEGIN PGP SIGNED MESSAGE----- We have received reports that the man-db package as supplied in Debian GNU/Linux 2....

Netscape FastTrack get Command Forced Directory Listing

When the remote web server is issued a request with a lower-case 'get', it will return a directory listing even if a default page such as index.html is present. For example : get / HTTP/1.0 will return a listing of the root directory. This allows an attacker to gain valuable information about the...

Microsoft IIS Traversal GET Request Remote DoS

It is possible to crash IIS by sending the request GET ../../' %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10117; scriptversion"1.37"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/05/14";...

Qpopper PASS Command Remote Overflow

There is a bug in some versions of Qpopper which allows a remote user to become root using a buffer overflow. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10196; scriptversion"1.33"; scriptcvsdate"Date: 2018/07/25 18:58:04"; scriptcveid"CVE-1999-0006";...