libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix security issues. These issues could cause program crashes, or possibly allow arbitrary code embedded in a malicious PNG image to execute. The PNG library is widely used within the system, so all sites should...

CVE-2004-0530

The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path...

Citadel/UX Remote Denial of Service Exploit (PoC)

Exploit for linux platform in category dos / poc ================================================= Citadel/UX Remote Denial of Service Exploit PoC ================================================= / citadeldos.c Citadel/UX Remote DoS exploit Proof of Concept Tested in Slackware 9.0.0 / 9.1.0 /...

CitadelUX - Remote Denial of Service (PoC)

CitadelUX - Remote Denial of Service PoC / citadeldos.c Citadel/UX Remote DoS exploit Proof of Concept Tested in Slackware 9.0.0 / 9.1.0 / 10.0.0 by CoKi No System Group - http://www.nosystem.com.ar / include include include include include include include include include include include define...

Citadel/UX - Remote Denial of Service (PoC)

/ citadeldos.c Citadel/UX Remote DoS exploit Proof of Concept Tested in Slackware 9.0.0 / 9.1.0 / 10.0.0 by CoKi No System Group - http://www.nosystem.com.ar / include include include include include include include include include include include define BUFFERSIZE 96+1 define ERROR -1 define...

SoX - Local Buffer Overflow

SoX - Local Buffer Overflow POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jmp %esp"...

SoX - Local Buffer Overflow

POC Exploit for SoX Stack Overflow Vulnerability found by Ulf Harnhammar Tested Under Slackware 9.1 Serkan Akpolat [email protected] | [email protected] Homepage: http://deicide.siyahsapka.org Greets to: Virulent deicide@gate:$ play britney.wav sh-2.05b$ "jmp %esp" from libc.so , change this ...

alternate samba package for Slackware 10.0

It was pointed out that the new Samba packages for Slackware 10.0 and -current have a dependency on libattr.so that wasn't in the previous packages. Since it's not the intent to introduce new requirements in security patches especially for stable versions, an alternate version of the samba packag...

new samba packages

New samba packages are available for Slackware 8.1, 9.0, 9.1, 10.0 and -current to fix security issues. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0600...

PHP

New PHP packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix security issues memorylimit handling and a problem in the striptags function. Sites using PHP should upgrade. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

kernel DoS

New kernel packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a denial of service security issue. Without a patch to asm-i386/i387.h, a local user can crash the machine. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...

cvs

New cvs packages that have been upgraded to cvs-1.11.17 are available for Slackware 8.1, 9.0, 9.1, and -current to fix various security issues. Sites running a CVS server should upgrade to the new CVS package right away. More details about the issues may be found in the Common Vulnerabilities and...

CVE-2004-0530

Summary: CVE-2004-0530 affects the PHP package in Slackware 8.1, 9.0, and 9.1. When these packages are linked against a static library, they include /tmp in the library search path, enabling local users to execute arbitrary code as the PHP user by placing shared libraries in the appropriate path....

CVE-2004-0530

The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path...

PHP local security issue

New PHP packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue. These fix a problem in previous Slackware php packages where linking PHP against a static library in an insecure path under /tmp could allow a local attacker to place shared libraries at this locatio...

mod_ssl

New modssl packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue. The packages were upgraded to modssl-2.8.18-1.3.31 fixing a buffer overflow that may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN, if modssl is...

cvs

New cvs packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a buffer overflow vulnerability which could allow an attacker to run arbitrary programs on the CVS server. Sites running a CVS server should upgrade to the new CVS package right away. More details about this issue may...

kdelibs

New kdelibs packages are available for Slackware 9.0, 9.1 and -current to fix security issues with URI handling. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0411 Here are the details fr...

mc

New mc packages are available for Slackware 9.0, 9.1, and -current to fix security issues that These could lead to a denial of service or the execution of arbitrary code as the user running mc. Sites that use mc should upgrade to the new mc package. More details about this issue may be found in t...

apache

New apache packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix security issues. These include a possible denial-of-service attack as well as the ability to possible pipe shell escapes through Apache's errorlog which could create an exploit if the error log is read in a termina...