272 matches found
Mandrake Linux Security Advisory : rp-pppoe (MDKSA-2004:145)
Max Vozeler discovered that when pppoe, part of the rp-pppoe package, is running setuid root, an attacker can overwrite any file on the system. Mandrakelinux does not install pppoe setuid, nor is it meant to be run setuid. Regardless, the packages have been patched to prevent this problem...
CVE-2004-0564
CVE-2004-0564 concerns rp-pppoe (pppoe) when the rp-pppoe package is configured to run setuid root. The description states that if rp-pppoe is installed or configured to operate with setuid root contrary to its design, local users can overwrite arbitrary files. Several connected sources (SUSE and...
CVE-2004-0564: Undefined Security Weakness
Roaring Penguin pppoe rp-ppoe, if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root." Therefore this...
[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise
-------------------------------------------------------------------------- Debian Security Advisory DSA 557-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise
-------------------------------------------------------------------------- Debian Security Advisory DSA 557-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2004 http://www.debian.org/security/faq -...
Re: Vulnerability Netgear RP-114 Router - nmap causes DOS
In-Reply-To: [email protected] I found the same thing happens when one nmaps or attempts to connect too many times to Dynalink ADSL router RTA-020, tested with both firmwares. I still have no response from the vendor on this subject. Received: qmail 6003 invoked from...
Vulnerability Netgear RP-114 Router - nmap causes DOS
BugTraq, This has been submitted to CERT as well. Here is the form I sent to them: CONTACT INFORMATION ============================================================================ === Let us know who you are: Name : Omkhar Arasaratnam E-mail : [email protected] Phone / fax :...
CVE-2001-0026
CVE-2001-0026 affects rp-pppoe, a userspace PPPoE client. The issue occurs when a crafted TCP segment uses the Clamp MSS option with a zero-length option, which can cause the client to enter an infinite loop and drop the connection (denial of service). Mandrake/MDKSA-2000:084 notes versions prior...
CVE-2001-0026: Undefined Security Weakness
rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option...
CVE-2001-0026
rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option...
DoS vulnerability in rp-pppoe versions <= 2.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is a denial-of-service vulnerability in rp-pppoe versions up to 2.4. rp-pppoe is a user-space PPPoE client for a bunch of UNIXes and Linux, used by many residential ADSL customers. If you use the "Clamp MSS" option and someone crafts a TCP packe...