3362 matches found
CVE-2002-0378
The CVE-2002-0378 issue concerns the LPRng print spooler defaulting to accept print jobs from arbitrary remote hosts in Red Hat Linux 7.0–7.3, Mandrake 8.1–8.2, and similar OSes. Connected advisories (e.g., RHSA-2002:120, RHSA-2002:089, MDKSA-2002:042) document that the default policy allowed rem...
Important: Red Hat Security Advisory: : Relaxed LPRng job submission policy
The LPRng print spooler, as shipped in Red Hat Linux 7.x, accepts all remote print jobs by default. With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation environment. We are grateful to Matthew Caron for pointing out this...
Important: Red Hat Security Advisory: : Updated mailman packages available
Updated mailman packages are now available for Red Hat Linux 7.2 and 7.3. These updates resolve a cross-site scripting vulnerability present in versions of Mailman prior to 2.0.11. Two cross-site scripting vulnerabilities have been discovered in versions of Mailman prior to version 2.0.11...
Ehud Gavron TrACESroute 6.1.1 - Terminator Function Format String
source: https://www.securityfocus.com/bid/4956/info A format string vulnerability exists in TrACESroute. The problem exists in the terminator -T function of the program. Due to improper use of the fprintf function, an attacker may be able to supply a malicious format string to the program that...
Ehud Gavron TrACESroute 6.1.1 - Terminator Function Format String
Ehud Gavron TrACESroute 6.1.1 - Terminator Function Format String source: https://www.securityfocus.com/bid/4956/info A format string vulnerability exists in TrACESroute. The problem exists in the terminator -T function of the program. Due to improper use of the fprintf function, an attacker may ...
Moderate: Red Hat Security Advisory: : Updated tcpdump packages fix buffer overflow
Updated tcpdump, libpcap, and arpwatch packages are available for Red Hat Linux 6.2 and 7.x. These updates close a buffer overflow when handling NFS packets. Update 3 October 2002 Replacement packages have been added for Red Hat Linux 6.2 as the previous packages could not be installed with the...
CVE-2002-0169
The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier...
Important: Red Hat Security Advisory: : : : Updated nss_ldap packages fix pam_ldap vulnerability
Updated nssldap packages are now available for Red Hat Linux 6.2, 7, 7.1, 7.2, and 7.3. These packages fix a string format vulnerability in the pamldap module. Update Jun 4, 2002 Replacement packages have been added for Red Hat Linux 6.2. The previous packages could not be installed with the...
[RHSA-2002:078-04] Updated mpg321 packages available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated mpg321 packages available Advisory ID: RHSA-2002:078-04 Issue date: 2002-04-30 Updated on: 2002-05-06 Product: Red Hat Linux Keywords: mp321 buffer overflow network Cros...
[RHSA-2002:070-06] Updated mod_python packages available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated modpython packages available Advisory ID: RHSA-2002:070-06 Issue date: 2002-04-22 Updated on: 2002-05-02 Product: Red Hat Linux Keywords: modpython publisher imported...
[RHSA-2002:062-08] Insecure DocBook stylesheet option
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Insecure DocBook stylesheet option Advisory ID: RHSA-2002:062-08 Issue date: 2002-04-11 Updated on: 2002-04-26 Product: Red Hat Linux Keywords: docbook stylesheet Cross...
logwatch211.sh
--- INTRO --- LogWatch is a customizable log analysis system. LogWatch parses through your system's logs for a given period of time and creates a report analyzing areas that you specify, in as much detail as you require. The collected results are reported to a chosen e-mail address, root by...
Important: Red Hat Security Advisory: : New imlib packages available
Updated imlib packages are now available for Red Hat Linux 6.2, 7, 7.1 and 7.2 which fix potential problems loading untrusted images. Imlib versions prior to 1.9.13 would fall back to loading images via the NetPBM package, which has various problems making it unsuitable for loading untrusted...
Moderate: Red Hat Security Advisory: : Vulnerability in zlib library (powertools)
Update 20 Mar 2002: VNC packages updated to fix another denial of service vulnerability caused by the previous update. Thanks to Const Kaplinsky for discovering this issue. The zlib compression library provides in-memory compression and decompression functions. It is widely used throughout Linux...
CVE-1999-1329
The CVE describes a local privilege escalation caused by a buffer overflow in SysVInit on Red Hat Linux 5.1 and earlier. Affected component: SysVInit; vulnerable action: buffer overflow leading to privilege gain. Root cause: overflow in SysVInit that permits local users to escalate privileges to ...
CVE-1999-1335
CVE-1999-1335 concerns the cmu-snmp package’s snmpd server on Red Hat Linux 4.0 prior to 3.3-1. The vulnerability arises because snmpd is configured to allow remote attackers to read and write sensitive information. Affected product: cmu-snmp snmpd; vulnerable version before 3.3-1. Remediation pe...
CVE-2001-0852
CVE-2001-0852 affects TUX HTTP server 2.1.0-2 on Red Hat Linux, allowing a remote attacker to cause a denial of service by sending a long Host header. The related Red Hat advisory RHSA-2001:142 notes a remote DoS fix affecting the TUX web server and indicates the fix is part of updated kernel pac...
CVE-2001-0635
Red Hat Linux 7.1 is affected by CVE-2001-0635 due to insecure permissions on swap files created at install. The swap files could be world-readable, enabling a local attacker to read sensitive data such as passwords and potentially escalate privileges. The connected Red Hat advisory RHSA-2001:058...
