CVE-2007-0823

CVE-2007-0823 affects xterm on Slackware Linux 10.2, where information displayed to one user could remain in the same xterm process memory and be readable by subsequent users sharing that interactive process. This could allow local users to bypass file permissions and obtain sensitive information...

CVE-2007-0823

xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file permissions and read other users' files, or obtain other sensitive information, by reading the xterm process memory. NOT...

CVE-2007-0822

umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen drive that was mounted and then physically removed, which might allow the users to obtain sensiti...

[slackware-security] bind

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix denial of service security issues. Versions of bind-9.2.x older than bind-9.2.8, and versions of bind-9.3.x older than 9.3.4 can be made to crash with malformed local or remote data. More details about...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-5974 https://vulners.com/cve/CVE-2006-5867 He...

berlios.meta.txt

package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' = 1, 'UserOpts' =...

Berlios GPSD <= 2.7 Remote Format String Exploit (meta)

No description provided by source. package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb senotier at enseirb.fr', ,...

Berlios GPSD 2.7 - Remote Format String (Metasploit)

package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' = 1, 'UserOpts' =...

Slackware 10.2 / 11.0 : mozilla-thunderbird (SSA:2006-357-02)

New mozilla-thunderbird packages are available for Slackware 10.2 and 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-357-02. The text itself is copyright ...

Slackware 10.2 / 11.0 : mozilla-firefox (SSA:2006-357-01)

New mozilla-firefox packages are available for Slackware 10.2 and 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-357-01. The text itself is copyright C...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2200 Here are the details from the Slackware 11.0...

[slackware-security] koffice

A new koffice package is available for Slackware 10.2 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-6120 Here are the details from the Slackware 10.2 ChangeLog:...

[slackware-security] seamonkey

A new seamonkey package is available for Slackware 11.0 to fix security issues. Here are the details from the Slackware 11.0 ChangeLog: patches/packages/seamonkey-1.0.7-i486-1slack11.0.tgz: Upgraded to seamonkey-1.0.7. This upgrade fixes several possible security bugs. For more information, see:...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2 and 11.0 to fix security issues. Here are the details from the Slackware 11.0 ChangeLog: patches/packages/mozilla-thunderbird-1.5.0.9-i686-1.tgz: Upgraded to thunderbird-1.5.0.9. This upgrade fixes several possible security bugs. F...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 10.2 and 11.0 to fix security issues. Here are the details from the Slackware 11.0 ChangeLog: extra/mozilla-firefox-2.0.0.1/mozilla-firefox-2.0.0.1-i686-1.tgz: Upgraded to Mozilla Firefox 2.0.0.1. This upgrade fixes several possible securit...

[slackware-security] gnupg [resigned]

Hello, As many people have pointed out, the last advisory SSA:2006-340-01 was not signed with the usual Slackware Security Team key fingerprint 40102233. I did some reconfiguration on the box that does the distribution signing and it had some unintended side-effects. :-/ Several CHECKSUMS.md5.asc...

[slackware-security] gnupg

New gnupg packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about the issues may be found here: http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html https://vulners.com/cve/CVE-2006-6235 https://vulners.com/cve/CVE-2006-61...

LibTIFF多个过滤检查拒绝服务漏洞

Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff多个算术运算不正确处理，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于对范围的检查操作存在问题，可导致使用恶意值而绕过安全过滤检查，可造成客户端最后调用abort函数而产生拒绝服务攻击。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x8664 S.u.S.E. Linux Profession...

FreePBX Shell命令执行漏洞

FreePBX是一款开放源代码的VOIP应用服务程序。 FreePBX不正确处理SHELL元字符，远程攻击者可以利用漏洞以进程权限执行任意命令。 由于对CALLERIDname或者number中的SHELL元字符缺少处理，可导致提交恶意字符串，以WEB权限执行。 OSSP Sheila 1.1.5 + Debian Linux 3.0 + HP Secure OS software for Linux 1.0 + MandrakeSoft Corporate Server 1.0.1 + MandrakeSoft Linux Mandrake 8.2 + MandrakeSoft Lin...

[slackware-security] libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-5793 Here are the details from the Slackware 11.0...