CVE-2002-0062

Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."...

Important: Red Hat Security Advisory: : Updated mod_ssl packages available

Updated modssl packages for Red Hat Linux 7, 7.1, and 7.2 are available which close a buffer overflow in modssl. When session caching is enabled, modssl will serialize SSL session variables to store them for later use. Unpatched versions of modssl prior to version 2.8.7 which use the 'shm' or 'db...

CVE-2002-0062: Buffer Copy without Checking Size of Input

Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."...

compress(vul) + ftpd(?)

hyph@port $ rpm -qf which compress ncompress-4.2.4-21 hyph@port $ compress perl -e 'print "A" x 1100' AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...

Critical: Red Hat Security Advisory: : Updated PHP packages are available [updated 2002-Mar-11]

Updated PHP packages are available to fix vulnerabilities in the functions that parse multipart MIME data, which are used when uploading files through forms. This revised advisory contains updated packages for Red Hat Linux 7, 7.1, and 7.2. PHP is an HTML-embeddable scripting language. A number o...

[RHSA-2002:020-05] Updated ncurses4 compat packages are available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated ncurses4 compat packages are available Advisory ID: RHSA-2002:020-05 Issue date: 2002-01-29 Updated on: 2002-02-19 Product: Red Hat Linux Keywords: ncurses4 buffer overr...

CVE-2001-1013

Apache on Red Hat Linux with the UserDir directive enabled is affected by CVE-2001-1013. The vulnerability arises because the web server generates different error codes depending on whether a username exists and a public_html directory is present, versus when the username does not exist. This beh...

CVE-2001-1013

Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server...

CVE-2001-1013: Undefined Security Weakness

Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server...

Heap overflow in snmpnetstat

---------------------------- Axioma Security Research January 3, 2002 A D V I S O R Y www.axiomasistemas.com ---------------------------- Platforms : All : Tested on Red Hat Linux 7.1 Application : snmpnetstat from ucd-SNMP-4.2.3 www.net-snmp.org Impact : Remote access to the snmpnetstat client...

[RHSA-2001:162-04] Updated namazu packages are available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated namazu packages are available Advisory ID: RHSA-2001:162-04 Issue date: 2001-12-03 Updated on: 2001-12-07 Product: Red Hat Linux Keywords: namazu cross-site scripting...

CVE-2001-0852

TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header...

CVE-2001-0859

2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable permissions...

Important: Red Hat Security Advisory: : Updated apache packages available

Updated Apache packages are now available for Red Hat Linux 6.2, 7, 7.1, and 7.2. These packages upgrade the Apache Web server to version 1.3.22, which closes a potential security bug which would present clients with a listing of the contents of a directory instead of the contents of an index fil...

[RHSA-2001:142-15] kernel 2.2 and 2.4: syncookie vulnerability

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: kernel 2.2 and 2.4: syncookie vulnerability Advisory ID: RHSA-2001:142-15 Issue date: 2001-10-26 Updated on: 2001-11-02 Product: Red Hat Linux Keywords: syncookie security kerne...

CVE-2001-0787

LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges...

[RHSA-2001:110-05] Insecure setserial initscript

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Insecure setserial initscript Advisory ID: RHSA-2001:110-05 Issue date: 2001-09-12 Updated on: 2001-09-19 Product: Red Hat Linux Keywords: setserial initscript temporary file...

CVE-1999-1347

CVE-1999-1347 affects Red Hat Linux 6.1 and earlier. The vulnerability arises in Xsession, where local users with restricted accounts can bypass execution of the .xsession file by starting a desktop session (KDE, GNOME or similar) from KDM. This bypass allows the user to run with the environmenta...

CVE-1999-1406

The CVE-1999-1406 issue concerns the dumpreg utility in Red Hat Linux 5.1, which opens /dev/mem with O_RDWR. The underlying effect is that a local user can crash the kernel by redirecting stdout (fd 1) to the kernel, enabling a denial of service. The available documents confirm the affected compo...

CVE-1999-1346

PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file...