RedHat Linux 7.0 Apache - Remote Username Enumeration

RedHat Linux 7.0 Apache - Remote Username Enumeration source: https://www.securityfocus.com/bid/3335/info Versions of Apache webserver shipping with Red Hat Linux 7.0 and possibly other Apache distributions install with a default misconfiguration which could allow remote users to determine whethe...

RedHat Linux 7.0 Apache - Remote Username Enumeration

source: https://www.securityfocus.com/bid/3335/info Versions of Apache webserver shipping with Red Hat Linux 7.0 and possibly other Apache distributions install with a default misconfiguration which could allow remote users to determine whether a give username exists on the vulnerable system...

CVE-2001-1002

The default configuration of the DVI print filter dvips in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands...

Red Hat linux restore uses insecure environment variables allowing root compromise

Overview Some implementations of the Linux restoration utility, restore, call external programs on remote machines via the RSH environment variable. This may permit an attacker to compromise root if restore is setuid root. Description Some implementations of the Linux restoration utility, restore...

CVE-2001-0635

Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords...

Critical: Red Hat Security Advisory: : Updated Kerberos 5 packages now available

Updated Kerberos 5 packages are now available for Red Hat Linux 6.2, 7, and 7.1. These updates close vulnerabilities due to potential buffer overflows in the Kerberos-aware telnet server included in the krb5-workstation package. By exploiting buffer overflows in the telnet server included in the...

[RHSA-2001:093-03] Updated procmail packages available for Red Hat Linux 5.2, 6.2, 7 and 7.1

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated procmail packages available for Red Hat Linux 5.2, 6.2, 7 and 7.1 Advisory ID: RHSA-2001:093-03 Issue date: 2001-07-03 Updated on: 2001-07-13 Product: Red Hat Linux...

[RHSA-2001:095-04] New util-linux packages available to fix vipw permissions problems

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New util-linux packages available to fix vipw permissions problems Advisory ID: RHSA-2001:095-04 Issue date: 2001-07-12 Updated on: 2001-07-16 Product: Red Hat Linux Keywords:...

Moderate: Red Hat Security Advisory: : New util-linux packages available to fix vipw permissions problems

New util-linux packages are available for Red Hat Linux 7.1. These packages fix a problem where vipw would leave the /etc/shadow file world-readable after editing it. It is recommended that all users update to the fixed packages. Also, if you have used vipw on Red Hat Linux 7.1 before, make sure ...

Important: Red Hat Security Advisory: Kernel

A security hole has been found that does not affect the default configuration of Red Hat Linux, but it can affect some custom configurations of Red Hat Linux 7.1. The bug is specific to the Linux 2.4 kernel series. Aside from the fix, countless bugfixes have been applied to this kernel as a resul...

SSH allows deletion of other users files...

Sorry, I forgot some relevant information. With regards to previous post: Tested on:- Red Hat Linux release 7.0 Guinness zen-parse@clarity zen-parse$ rpm -qf /usr/sbin/sshd openssh-server-2.5.2p2-1.7.2 zen-parse@clarity zen-parse$ ssh -V OpenSSH2.5.2p2, SSH protocols 1.5/2.0, OpenSSL 0x0090581f T...

[RHSA-2001:074-03] Updated ispell packages available for Red Hat Linux 5.2 and 6.2

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated ispell packages available for Red Hat Linux 5.2 and 6.2 Advisory ID: RHSA-2001:074-03 Issue date: 2001-05-30 Updated on: 2001-06-04 Product: Red Hat Linux Keywords: ispe...

Critical: Red Hat Security Advisory: : Updated Kerberos 5 packages available

Updated Kerberos 5 packages are now available for Red Hat Linux 6.2, 7, and 7.1. These updates close a potential vulnerability present in the gssapi-aware ftpd included in the krb5-workstation package. By use of a carefully-crafted authentication request, a malicious client could exploit a...

CVE-2000-0829

The affected software is the tmpwatch utility in Red Hat Linux. The vulnerability arises because it forks a new process for each directory level when scanning /tmp or /var/tmp , enabling a local attacker to create deeply nested directories and trigger a denial of service . Exploitation details ar...

CVE-2000-0829

The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/...

[RHSA-2001:058-04] Updated mount package available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated mount package available Advisory ID: RHSA-2001:058-04 Issue date: 2001-04-25 Updated on: 2001-05-02 Product: Red Hat Linux Keywords: mount swapon swap permissions Cross...

Important: Red Hat Security Advisory: : Updated mount package available

Updated mount packages fixing a potential security problem are available. If any swap files were created during installation of Red Hat Linux 7.1 they were created during updates if the user requested it, they were world-readable, meaning every user could read data in the swap files, possibly...

[RHSA-2001:053-06] gftp format string vulnerability corrected

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: gftp format string vulnerability corrected Advisory ID: RHSA-2001:053-06 Issue date: 2001-04-20 Updated on: 2001-04-23 Product: Red Hat Linux Keywords: gftp format Cross...

CVE-2001-1467

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks...

[RHSA-2001:008-02] Updated vim packages available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated vim packages available Advisory ID: RHSA-2001:008-02 Issue date: 2001-01-29 Updated on: 2001-03-21 Product: Red Hat Linux Keywords: vim vim-enhanced stl status line Cros...