zgv.iopl.txt

Date: Fri, 19 Feb 1999 18:10:00 +0000 From: Chris Evans To: [email protected] Subject: Security hole: "zgv" Overview: "zgv" is an image viewer which runs under SVGAlib at the linux console probably BSD too. It has to be installed suid-root to access graphics hardware. History: "zgv" has a long...

pine-bof-10000.txt

Date: Mon, 8 Feb 1999 21:19:29 +0000 From: Chris Evans To: [email protected] Subject: Pine again : Hi, PINE seems to be flavour of the month so I'll add to Michal's post. This is much less serious than Michal's problem but probably noteworthy anyway. PINE can be made to crash if /var/spool/mai...

redhat.6.0.pts.permissions.txt

Date: Sun, 6 Jun 1999 19:15:05 +0000 From: noc-wage To: [email protected] Subject: RedHat 6.0, /dev/pts permissions bug when using xterm Once again I've come up with another trivial Denial of Service flaw, wow, I seem to be good at this Conseal Firewall, +++ath0, ppp byte-stuffing It's been a...

samba-wsmbconf.txt

Date: Thu, 19 Nov 1998 18:20:18 +1100 Reply-To: [email protected] Sender: Bugtraq List From: Andrew Tridgell Subject: Vulnerability in Samba on RedHat, Caldera and PHT TurboLinux -----BEGIN PGP SIGNED MESSAGE----- The Samba team has discovered two security vulnerabilities in the samba-1.9.1...

su+pam.redhat.txt

Date: Wed, 9 Jun 1999 14:07:27 -0700 From: Tani Hosokawa To: [email protected] Subject: vulnerability in su/PAM in redhat I was talking to some guy on IRC st2 and he asked me to mention to bugtraq because he's not on the list that the PAMified su that comes with redhat has a slight hole. When...

redhat.su.ghost.bug.txt

Date: Wed, 16 Jun 1999 13:47:52 +0200 From: Roman Ramirez Reply-To: [email protected] Organization: Intercomputer, S.A. To: [email protected] Hello: I think I have found some kind of bug in "su" in Redhat linux versions tested on Redhat 5.2 y Redhat 6.0 The problem seems to be when you...

rxvt.sh

There is a major security hole in rxvt, a terminal emulator for X, when it is run on systems suid root, as is required on many configurations in order to write to the utmp file. It is obvious from the code that this program was not written to be run suid root, its a pity that sysadmins that insta...

linuxconf.txt

Date: Sat, 22 Aug 1998 20:35:42 -0500 From: Alex Mottram Subject: Security concerns in linuxconf shipped w/RedHat 5.1 There exists a security / DOS problem with linuxconf-1.11.r11-rh3/i386 as upgraded from RedHat's FTP site. No other versions have been tested by me. Both the maintainer of linuxco...

resizecons.sh

There is a security hole in RedHat 2.1, which installs the program /usr/bin/resizecons suid root. The resizecons program allows a user to change the videmode of the console. During this process, it runs the program restoretextmode without an absolute pathname, assuming the correct version will be...

sysklogd.bof.txt

Date: Tue, 16 Feb 1999 02:22:56 -0500 From: Cory Visi To: [email protected] Subject: RedHat sysklogd vulnerability I'd like to apologize for being so late with this e-mail as I have known about this problem for months. The vulnerability was discussed in a Thu, 10 Sep 1998 BugTraq e-mail by...

RedHat Linux 5.2 i386/6.0 - No Logging

source: https://www.securityfocus.com/bid/320/info A vulnerability in PAM allows local malicious users to brute force passwords via the su command without any logging of their activity. su is a command that allows users to change identifies by supplying a password. If the password is correct su...

RedHat Linux 5.1 - xosview

RedHat Linux 5.1 - xosview // source: https://www.securityfocus.com/bid/362/info xosview is an X11 system monitoring application that ships with RedHat 5.1 installed setuid root. A buffer overflow vulnerability was found in Xrm.cc, the offending code listed below: char userrfilename1024;...

RedHat Linux 5.1 - xosview

// source: https://www.securityfocus.com/bid/362/info xosview is an X11 system monitoring application that ships with RedHat 5.1 installed setuid root. A buffer overflow vulnerability was found in Xrm.cc, the offending code listed below: char userrfilename1024; strcpyuserrfilename, getenv"HOME";...

RedHat Linux 5.05.15.2 Slackware Linux 3.5 - klogd Local Buffer Overflow (2)

RedHat Linux 5.05.15.2 Slackware Linux 3.5 - klogd Local Buffer Overflow 2 // source: https://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because...

RedHat Linux 5.0/5.1/5.2 / Slackware Linux 3.5 - 'klogd' Local Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because of a buffer overflow in the klogd handling of kernel messages. It is...

RedHat Linux 5.0/5.1/5.2 / Slackware Linux 3.5 - 'klogd' Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because of a buffer overflow in the klogd handling of kernel messages. It is...

RedHat Linux 5.05.15.2 Slackware Linux 3.5 - klogd Local Buffer Overflow (1)

RedHat Linux 5.05.15.2 Slackware Linux 3.5 - klogd Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/398/info It is possible to cause a denial of service remote and local through generating old, obscure kernel messages not terminated with \n in klogd. The problem exists because...

RedHat Linux 5.1 / Caldera OpenLinux Standard 1.2 - Mountd

// source: https://www.securityfocus.com/bid/121/info NFS servers running certain implementations of mountd, primarily Linux systems. On some systems, the vulnerable NFS server is enabled by default. This vulnerability can be exploited even if the NFS server does not share any file systems. This...

RedHat Linux 5.1 Caldera OpenLinux Standard 1.2 - Mountd

RedHat Linux 5.1 Caldera OpenLinux Standard 1.2 - Mountd // source: https://www.securityfocus.com/bid/121/info NFS servers running certain implementations of mountd, primarily Linux systems. On some systems, the vulnerable NFS server is enabled by default. This vulnerability can be exploited even...

RedHat Linux 5.0 - msgchk Local Privilege Escalation

RedHat Linux 5.0 - msgchk Local Privilege Escalation // source: https://www.securityfocus.com/bid/383/info // // Similar to the mh vulnerability, a buffer overflow exists in the version of msgchk shipped with RedHat Linux 5.0. The vulnerability allows a user to execute arbritrary commands as root...