[linux-security] [RHSA-2000:041-02] man package's 'makewhatis' uses insecure handling of files in /tmp

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: man package's 'makewhatis' uses insecure handling of files in /tmp Advisory ID: RHSA-2000:041-02 Issue date: 2000-07-03 Updated on: 2000-07-03 Product: Red Hat Linux Keywords: man /tmp...

CVE-2000-0617

Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable...

CVE-2000-0618

Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environmental variable...

CVE-2000-0602

Secure Locate slocate in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATEPATH environmental variable...

CVE-2000-0604

gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp...

CVE-2000-0357

CVE-2000-0357 affects ORBit and esound on Red Hat Linux 6.1, where insufficiently random numbers in authentication keys allow local users to guess keys. The CVSS vector (AV:N/AC:L/Au:N/C:P/I:P/A:P) yields a base score of 7.5 (HIGH). The vulnerability impact covers partial confidentiality, integri...

CVE-2000-0358

CVE-2000-0358 affects ORBit and gnome-session in Red Hat Linux 6.1, where remote attackers can cause a crash in a program. The available descriptions consistently state vulnerability to crash without detailing exploit vectors, affected versions beyond Red Hat Linux 6.1, or concrete remediation st...

CVE-2000-0364

The CVE-2000-0364 entry concerns Red Hat Linux 6.0 where screen and rxvt fail to properly set tty device modes, enabling a local user to write to other virtual consoles. The vulnerability is localized (attack vector LOCAL) with low complexity and no authentication, and it can impact confidentiali...

CVE-2000-0365

The CVE-2000-0365 entry concerns Red Hat Linux 6.0 where the /dev/pts file system is mounted with insecure modes. This configuration allows local users to write to other tty devices. The provided documents describe the affected component (/dev/pts) and the resulting local access impact but do not...

CVE-2000-0357

ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys...

CVE-2000-0358

ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program...

CVE-2000-0364

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys...

CVE-2000-0365

Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices...

CVE-2000-0364: Undefined Security Weakness

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys...

CVE-2000-0365: Undefined Security Weakness

Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices...

CVE-2000-0357: Undefined Security Weakness

ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys...

CVE-2000-0358: Undefined Security Weakness

ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program...

[linux-security] SECURITY: UPDATED - RHSA-2000:014 New Piranha release available

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Piranha web GUI exposure Advisory ID: RHSA-2000:014-16 Issue date: 2000-04-18 Updated on: 2000-04-26 Product: Red Hat Linux Keywords: piranha Cross references: php -...

CVE-2000-0248: Undefined Security Weakness

The web GUI for the Linux Virtual Server LVS software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands...

ISSalert: ISS Security Advisory: Backdoor Password in Red Hat Linux Virtual Server Package

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- ISS Security Advisory April 24, 2000...