RHEL 2.1 : vim (RHSA-2002:302)

Updated VIM packages are available for Red Hat Linux Advanced Server. These updates resolve a security issue when opening a specially crafted text file. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 VIM VIsual editor iMproved is a version of the vi editor. VIM allows a use...

RHEL 2.1 : gaim (RHSA-2002:191)

Updated gaim packages are now available for Red Hat Linux Advanced Server. These updates fix a vulnerability in the default URL handler. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prio...

RHEL 2.1 : nss_ldap (RHSA-2002:180)

Updated nssldap packages are now available for Red Hat Linux Advanced Server 2.1. These updates fix a potential buffer overflow which can occur when nssldap is set to configure itself using information stored in DNS as well as a format string bug in logging functions used in pamldap. Updated 09 J...

RHEL 2.1 : kernel (RHSA-2002:227)

This kernel update for Red Hat Linux Advanced Server 2.1 addresses some security issues and provides minor bug fixes. The Linux kernel handles the basic functions of the operating system. A number of vulnerabilities were found in the Red Hat Linux Advanced Server kernel. These vulnerabilities cou...

[Full-Disclosure] [RHSA-2004:182-01] Updated httpd packages fix mod_ssl security issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated httpd packages fix modssl security issue Advisory ID: RHSA-2004:182-01 Issue date: 2004-04-30 Updated on: 2004-04-30 Product: Red Hat...

[Full-Disclosure] [RHSA-2004:179-01] An updated LHA package fixes security vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: An updated LHA package fixes security vulnerabilities Advisory ID: RHSA-2004:179-01 Issue date: 2004-04-30 Updated on: 2004-04-30 Product: Red...

[Full-Disclosure] [RHSA-2004:159-01] Updated Subversion packages fix security vulnerability in neon

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated Subversion packages fix security vulnerability in neon Advisory ID: RHSA-2004:159-01 Issue date: 2004-04-15 Updated on: 2004-04-15...

[Full-Disclosure] [RHSA-2004:158-01] Updated cadaver package fixes security vulnerability in neon

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated cadaver package fixes security vulnerability in neon Advisory ID: RHSA-2004:158-01 Issue date: 2004-04-14 Updated on: 2004-04-14 Produc...

CVE-2004-0217

CVE-2004-0217 affects Symantec AntiVirus Scan Engine on Red Hat Linux (LiveUpdate capability via liveupdate.sh) and allows local users to create or append arbitrary files by exploiting a symlink on /tmp/LiveUpdate.log. Affected versions: 4.0 and 4.3. Root cause: symlink attack in LiveUpdate.log h...

CVE-2004-0217

The LiveUpdate capability liveupdate.sh in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log...

PT-2004-1382 · Red Hat +1 · Red Hat +1

Name of the Vulnerable Software and Affected Versions: Symantec AntiVirus Scan Engine versions 4.0 through 4.3 Description: The issue allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log. This is related to the LiveUpdate capability liveupdate.sh i...

Important: Red Hat Security Advisory: : Updated kdelibs packages resolve cookie security issue

Updated kdelibs packages that fix a flaw in cookie path handling are now available. Konqueror is a file manager and Web browser for the K Desktop Environment KDE. Flaws have been found in the cookie path handling between a number of Web browsers and servers. The HTTP cookie standard allows a Web...

Moderate: Red Hat Security Advisory: : Updated mod_python packages fix denial of service vulnerability

Updated modpython packages that fix a denial of service vulnerability are now available for Red Hat Linux. modpython embeds the Python language interpreter within the Apache httpd server. A bug has been found in modpython versions 3.0.3 and earlier that can lead to a denial of service...

[Full-Disclosure] [RHSA-2004:091-01] Updated libxml2 packages fix security vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated libxml2 packages fix security vulnerability Advisory ID: RHSA-2004:091-01 Issue date: 2004-02-26 Updated on: 2004-02-26 Product: Red Ha...

[Full-Disclosure] Proofpoint Protection Server remote MySQL root user vulnerability

Product: Protection Server Version: unknown/Red Hat Linux Developer: Proofpoint URL: www.proofpoint.com Summary: The MySQL server may be remotely access by the "root" user without using a password. Details: The Proofpoint Protection Server is a software product to filter spam and other e-mail...

[Full-Disclosure] Possible race condition in Symantec AntiVirus Scan Engine for Red Hat Linux during LiveUpdate

Hi, during evaluation of Symantec AntiVirus Scan Engine for Red Hat Linux file: ScanEngine430-RedHat-1.zip we found a race condition using default configuration. Like written in "ImplementationGuide.pdf" on page 134 LiveUpdate can be triggered by cron via a shell script:...

Symantec AntiVirus Scan Engine for Red Hat Linux symbolic links problem

Symbolic links problem during LiveUpdate logging...

[RHSA-2004:048-01] Updated PWLib packages fix protocol security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated PWLib packages fix protocol security issues Advisory ID: RHSA-2004:048-01 Issue date: 2004-02-13 Updated on: 2004-02-13 Product: Red Ha...

Hijacking Apache 2 via mod_perl

Product: modperl Versions: 1.9909 / apache 2.0.47 URL: http://perl.apache.org Impact: Daemon Hijacking Bug class: Leaked Descriptor Vendor notified: Yes Fix available: No Date: 01/21/04 Issue: ====== Modperl under apache 2.0.x leaks critical file descriptors that can be used to takeover hijack th...

Low: Red Hat Security Advisory: : Updated apache packages fix minor security vulnerability

Updated Apache packages that fix a minor security issue are now available for Red Hat Linux 7.1, 7.2, and 7.3. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. An issue in the handling of regular expressions from configuration files was discovered i...