[RHSA-2001:074-03] Updated ispell packages available for Red Hat Linux 5.2 and 6.2

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated ispell packages available for Red Hat Linux 5.2 and 6.2 Advisory ID: RHSA-2001:074-03 Issue date: 2001-05-30 Updated on: 2001-06-04 Product: Red Hat Linux Keywords: ispe...

Critical: Red Hat Security Advisory: : Updated Kerberos 5 packages available

Updated Kerberos 5 packages are now available for Red Hat Linux 6.2, 7, and 7.1. These updates close a potential vulnerability present in the gssapi-aware ftpd included in the krb5-workstation package. By use of a carefully-crafted authentication request, a malicious client could exploit a...

CVE-2000-0829

The affected software is the tmpwatch utility in Red Hat Linux. The vulnerability arises because it forks a new process for each directory level when scanning /tmp or /var/tmp , enabling a local attacker to create deeply nested directories and trigger a denial of service . Exploitation details ar...

CVE-2000-0829

The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/...

CVE-2000-0829: Undefined Security Weakness

The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/...

[RHSA-2001:058-04] Updated mount package available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated mount package available Advisory ID: RHSA-2001:058-04 Issue date: 2001-04-25 Updated on: 2001-05-02 Product: Red Hat Linux Keywords: mount swapon swap permissions Cross...

Important: Red Hat Security Advisory: : Updated mount package available

Updated mount packages fixing a potential security problem are available. If any swap files were created during installation of Red Hat Linux 7.1 they were created during updates if the user requested it, they were world-readable, meaning every user could read data in the swap files, possibly...

[RHSA-2001:053-06] gftp format string vulnerability corrected

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: gftp format string vulnerability corrected Advisory ID: RHSA-2001:053-06 Issue date: 2001-04-20 Updated on: 2001-04-23 Product: Red Hat Linux Keywords: gftp format Cross...

CVE-2001-1467

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks...

[RHSA-2001:008-02] Updated vim packages available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated vim packages available Advisory ID: RHSA-2001:008-02 Issue date: 2001-01-29 Updated on: 2001-03-21 Product: Red Hat Linux Keywords: vim vim-enhanced stl status line Cros...

[RHSA-2001:013-05] Three security holes fixed in new kernel

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Three security holes fixed in new kernel Advisory ID: RHSA-2001:013-05 Issue date: 2001-02-08 Updated on: 2001-02-08 Product: Red Hat Linux Keywords: sysctl ptrace mxcsr P4 Cros...

[RHSA-2001:006-03] Updated inetd packages available for Red Hat Linux 6.2

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated inetd packages available for Red Hat Linux 6.2 Advisory ID: RHSA-2001:006-03 Issue date: 2001-01-25 Updated on: 2001-01-30 Product: Red Hat Linux Keywords: inetd close...

CVE-2000-0934

Glint in Red Hat Linux 5.2 is affected. The vulnerability allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. Root cause is a symlink-related flaw in Glint that enables path manipulation leading to file overwrites and service disruption. No explicit...

CVE-2000-1189

CVE-2000-1189 describes a buffer overflow in the pam_localuser PAM module used by Red Hat Linux 7.x and 6.x, enabling privilege escalation. The underlying cause is a memory handling flaw in pam_localuser, leading to complete confidentiality, integrity, and availability impacts as stated in the CV...

CVE-2000-0934

Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack...

CVE-2000-0956

cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions...

CVE-2000-1189

Buffer overflow in pamlocaluser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges...

CVE-2000-1189: Undefined Security Weakness

Buffer overflow in pamlocaluser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges...

ISSalert: Internet Security Systems Security Alert: Ramen Linux Worm

Internet Security Systems Security Alert January 18, 2000 Ramen Linux Worm Propagation Synopsis: A self-propagating worm known as Ramen is currently exploiting well-known holes in unpatched Red Hat Linux 6.2 systems and in early versions of Red Hat 7.0. In addition to scanning for additional...

Buffer Overflow still exists in Netscape <= 4.76

Hello. I have noticed that the buffer overflow discovered by Michal Zalewski and covered extensively by the different unix distributions is still present in netscape 4.76 even though they claim it is not. Refer to these links for background information:...