CVE-2002-0062

CVE-2002-0062 is a local privilege-escalation in ncurses 5.0 and the ncurses4 compatibility package, caused by a buffer overflow in routines for moving the physical cursor and scrolling. Debian and Red Hat advisories describe the issue and assign CAN-2002-0062. Affected products include ncurses 5...

mkpasswd uses weak random number generator

Overview Mkpasswd generates passwords that are insufficiently random. Description Mkpasswd is a password generation utility included with Red Hat Linux and possibly other Linux distributions. Mkpasswd generates passwords that are not sufficiently random, which may allow an attacker to predict...

CVE-2003-0080

The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled...

Important: Red Hat Security Advisory: : New kernel 2.2 packages fix vulnerabilities

Updated kernel packages for Red Hat Linux 6.2 and 7.0 are now available that fix several security vulnerabilities. The Linux kernel handles the basic functions of the operating system. A bug in the kernel module loader code allows a local user to gain root privileges. The Common Vulnerabilities a...

[RHSA-2003:089-00] Updated glibc packages fix vulnerabilities in RPC XDR decoder

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated glibc packages fix vulnerabilities in RPC XDR decoder Advisory ID: RHSA-2003:089-00 Issue date: 2003-03-19 Updated on: 2003-03-19 Product: Red Hat Linux Keywords: sun RPC XDR integer...

Critical: Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in RPC XDR decoder

Updated glibc packages are available to fix an integer overflow in the XDR decoder. The glibc package contains standard libraries that are used by multiple programs on the system. Sun RPC is a remote procedure call framework that allows clients to invoke procedures in a server process over a...

CVE-2003-0080

The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled...

CVE-2003-0080

The vulnerability is in Red Hat Linux 8.0’s Gnome-lokkit, where the iptables ruleset leaves the FORWARD chain without any rules. This permits bypassing intended access restrictions if packet forwarding is enabled, by an attacker who can trigger forwarding. The affected component is the iptables r...

Critical: Red Hat Security Advisory: : New samba packages fix security vulnerabilities

Updated Samba packages are now available to fix security vulnerabilities found during a code audit. Updated 24 March 2003 Updated Samba packages for Red Hat Linux 6.2, 7, and 7.1 are now included. These packages contain Samba version 2.0.10 with a backported security fix. Updated 1 April 2003...

Important: Red Hat Security Advisory: : Updated 2.4 kernel fixes vulnerability

Updated kernel packages for Red Hat Linux 7.1, 7.2, 7.3, and 8.0 are now available. These packages fix a ptrace-related vulnerability that can lead to elevated root privileges. Updated 30 March 2003 Updated kernel packages for Red Hat Linux 7.2 ia64 have been added. Updated 28 May 2003 Replacemen...

PXE Server 2.0 - Remote Buffer Overrun

PXE Server 2.0 - Remote Buffer Overrun // source: https://www.securityfocus.com/bid/7129/info A vulnerability has been discovered in PXE which is included with Red Hat Linux. Specifically, it is possible for a remote attacker to overrun a buffer by passing excessive data to the service. This may...

PXE Server 2.0 - Remote Buffer Overrun

// source: https://www.securityfocus.com/bid/7129/info A vulnerability has been discovered in PXE which is included with Red Hat Linux. Specifically, it is possible for a remote attacker to overrun a buffer by passing excessive data to the service. This may result in the corruption of sensitive...

[RHSA-2003:057-06] Updated shadow-utils packages fix exposure

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated shadow-utils packages fix exposure Advisory ID: RHSA-2003:057-06 Issue date: 2003-02-12 Updated on: 2003-02-18 Product: Red Hat Linux Keywords: mail mailspool Cross...

Low: Red Hat Security Advisory: fileutils security update

Updated fileutils packages are available which fix a race condition in recursive remove and move commands. The fileutils package includes a number of GNU versions of common and popular file management utilities. A race condition in recursive use of rm and mv commands in fileutils 4.1 and earlier...

CVE-2003-0019

umlnet in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local users to modify network interfaces, e.g. by modifying ARP entries or placing interfaces into promiscuous mode...

Low: Red Hat Security Advisory: : : : Updated fileutils package fixes race condition in recursive operations

New fileutils packages for Red Hat Linux 6.2, 7.0, 7.1, 7.2 and 7.3 fix a race condition in recursive remove and move commands. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The fileutils package includes a number of GNU versions of common and popular...

Important: Red Hat Security Advisory: : : : Updated PAM packages fix bug in pam_xauth module

Updated PAM packages are now available for Red Hat Linux 7.1, 7.2, 7.3, and 8.0. These packages correct a bug in pamxauth's handling of authorization data for the root user. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The pamxauth module is used to...

Low: Red Hat Security Advisory: : : : Updated lynx packages fix CRLF injection vulnerability

Updated lynx packages are available that fix an error in the way lynx parses its command line arguments, which can lead to faked headers being sent to a web server. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. Lynx is a character-cell Web browser,...

Important: Red Hat Security Advisory: mozilla security update

Updated Mozilla packages are now available for Red Hat Linux Advanced Server. These new packages fix vulnerabilities in previous versions of Mozilla. Mozilla is an open source Web browser. Versions of Mozilla prior to version 1.0.1 contain various security vulnerabilities. These vulnerabilities...

kernel-utils sets insecure permissions on "uml_net" utility

Overview The umlnet utility, part of the kernel-utils package in Red Hat Linux 8.0, was shipped with incorrect permissions. Description User-Mode Linux UML is a tool to provide a virtual machine in which to run another copy of Linux. In Red Hat linux 8.0, the kernel-utils package contains the UML...