Moderate: Red Hat Security Advisory: : : : Updated wget packages fix directory traversal bug

The wget packages shipped with Red Hat Linux 6.2 through 8.0 contain a security bug which, under certain circumstances, can cause local files to be written outside the download directory. Updated 10 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems Versions of wget pri...

Important: Red Hat Security Advisory: Canna security update

The Canna server, used for Japanese character input, has two security vulnerabilities including an exploitable buffer overflow that allows a local user to gain 'bin' user privileges. Updated packages for Red Hat Linux Advanced Server are available. Updated 13 Jan 2003 Added fixed packages for the...

Moderate: Red Hat Security Advisory: : Updated Webalizer packages fix vulnerability

Updated Webalizer packages which fix an obscure buffer overflow bug in the DNS resolver code are available for Red Hat Linux 7.2. The Webalizer is a Web server log file analysis program which produces detailed usage reports in HTML format. A buffer overflow in Webalizer versions prior to 2.01-10,...

Important: Red Hat Security Advisory: kernel security update

The kernel in Red Hat Linux Advanced Server 2.1 is vulnerable to a local denial of service attack. Updated packages are available which address this vulnerability. Updated 28 August 2003 Added CAN-2003-0461 to the list of security issues that were fixed by this advisory there are no changes to th...

iDEFENSE Security Advisory 11.08.02a: File Disclosure Vulnerability in Simple Web Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.08.02a: http://www.idefense.com/advisory/11.08.02a.txt File Disclosure Vulnerability in Simple Web Server November 8, 2002 I. BACKGROUND As its name suggests, Peter Sandvik's Simple Web Server is a Linux-based web server...

Critical: Red Hat Security Advisory: : Updated kerberos packages available

A remotely exploitable stack buffer overflow has been found in the Kerberos v4 compatibility administration daemon distributed with the Red Hat Linux krb5 packages. Kerberos is a network authentication system. A stack buffer overflow has been found in the implementation of the Kerberos v4...

Important: Red Hat Security Advisory: kernel security update

This kernel update for Red Hat Linux Advanced Server 2.1 addresses some security issues and provides minor bug fixes. The Linux kernel handles the basic functions of the operating system. A number of vulnerabilities were found in the Red Hat Linux Advanced Server kernel. These vulnerabilities cou...

Important: Red Hat Security Advisory: : Updated ypserv packages fixes memory leak

Updated ypserv packages which fix a memory leak are now available for Red Hat Linux 7.x and 6.2. ypserv is an NIS authentication server. ypserv versions before 2.5 contain a memory leak that can be triggered remotely. When someone requests a map that doesn't exist, a previous mapname may be leake...

Important: Red Hat Security Advisory: : Updated Mozilla packages fix security vulnerabilities

Updated Mozilla packages are now available for Red Hat Linux. These new packages fix vulnerabilities in previous versions of Mozilla. Mozilla is an open source web browser. Versions of Mozilla previous to version 1.0.1 contain various security vulnerabilities. These vulnerabilities could be used ...

[RHSA-2002:205-15] New kernel fixes local security issues

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel fixes local security issues Advisory ID: RHSA-2002:205-15 Issue date: 2002-09-20 Updated on: 2002-10-15 Product: Red Hat Linux Keywords: Cross references: Obsoletes:...

[RHSA-2002:210-06] New kernel 2.2 packages fix local vulnerabilities

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel 2.2 packages fix local vulnerabilities Advisory ID: RHSA-2002:210-06 Issue date: 2002-09-23 Updated on: 2002-10-10 Product: Red Hat Linux Keywords: elevated local roo...

[RHSA-2002:206-12] New kernel fixes local security issues

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New kernel fixes local security issues Advisory ID: RHSA-2002:206-12 Issue date: 2002-09-23 Updated on: 2002-10-15 Product: Red Hat Linux Keywords: Cross references: Obsoletes:...

Moderate: Red Hat Security Advisory: : Updated xinetd packages fix denial of service vulnerability

Xinetd contains a denial-of-service DoS vulnerability. UPDATE 2002-12-02: Updated packages are available to fix issues encountered with the previous errata packages. Xinetd is a secure replacement for inetd, the Internet services daemon. Versions of Xinetd prior to 2.3.7 leak file descriptors for...

Important: Red Hat Security Advisory: : Updated nss_ldap packages fix buffer overflow

Updated nssldap packages are now available for Red Hat Linux 6.2, 7, 7.1, 7.2, and 7.3. These updates fix a potential buffer overflow which can occur when nssldap is set to configure itself using information stored in DNS, a format string bug in logging functions used in pamldap, and to properly...

Moderate: Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in resolver

Updated glibc packages are available to fix a buffer overflow in the resolver. The GNU C library package, glibc, contains standard libraries used by multiple programs on the system. A read buffer overflow vulnerability exists in the glibc resolver code in versions of glibc up to and including...

Moderate: Red Hat Security Advisory: ethereal security update

Updated ethereal packages are available which fix several security problems. Ethereal is a package designed for monitoring network traffic on your system. Several security issues have been found in the Ethereal packages distributed with Red Hat Linux Advanced Server: Buffer overflow in Ethereal...

Guardent Client Advisory: Multiple wordtrans-web Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Guardent Client Advisory Multiple wordtrans-web Vulnerabilities September 6th, 2002 Summary: Guardent has discovered vulnerabilities in the wordtrans-web package. The vulnerabilities allow for remote execution of arbitrary code under the privileges of user runni...

Important: Red Hat Security Advisory: gaim security update

Updated gaim packages are now available for Red Hat Linux Advanced Server. These updates fix a vulnerability in the default URL handler. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prio...

CVE-2000-1214

The CVE-2000-1214 issue affects the iputils package’s ping utility. Specifically, buffer overflow vulnerabilities exist in the (1) outpack and (2) buf variables within ping on iputils versions prior to the 20001010 release, as distributed on Red Hat Linux 6.2 through 7J and other operating system...

CVE-2000-1213

The CVE-2000-1213 entry concerns ping (iputils) before 20001010, distributed on Red Hat Linux 6.2–7J and other OSes. The root cause is that ping fails to drop privileges after acquiring a raw socket, increasing exposure to bugs that would occur at lower privileges. The vulnerability is tied to th...