Updated Lynx package for Slackware 7.0 & -current

...

Elm Development Group ELM 2.42.5.1 Mail for UNIX - ELM Buffer Overflow (1)

Elm Development Group ELM 2.42.5.1 Mail for UNIX - ELM Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1276/info // // Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. // / Elm Exploit - Scrippie - Phreak.nl - b0f - http://b0f.freebsd.lublin.pl This exploit...

Elm Development Group ELM 2.4/2.5.1 Mail for UNIX - ELM Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/1276/info // // Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. // / Elm Exploit - Scrippie - Phreak.nl - b0f - http://b0f.freebsd.lublin.pl This exploit spawns an EGID mail shell on the default Slackware 4 install. Use as:...

Linux news 30.04.00

Linux 2.3.99-pre6 Вышло новое ядро Linux из "нестабильной" серии: Linux 2.3.99-pre6. Подробнее: http://linuxtoday.com/stories/20829.html Kernel traffic 64 В новой версии обзора списка рассылки ядра можно узнать интересные подробности о: - дискуссии о DevFS - ошибках ioctl - проблемах с асинхронны...

emacs & gpm fixes for Slackware 7.0 & -current

...

CVE-1999-0298

ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. dot dot attack...

CVE-1999-0298

The CVE-1999-0298 issue affects ypbind when the -ypset and -ypsetme options are activated in Linux Slackware and SunOS. The underlying vulnerability is a directory traversal attack (".." path) that allows overwriting files. Reported impact includes local and remote attackers able to modify files....

CVE-1999-0421

The CVE-1999-0421 entry concerns Linux Slackware 3.6. During a reboot after installation, a remote attacker could obtain root access by logging in to the root account without a password. Affected software is Slackware 3.6; the underlying issue is unauthorized root login due to an unprotected root...

CVE-1999-0421

During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password...

slackware7.login.txt

Hi, Below I describe a bug in Slackware 7.0. I did notify [email protected] about a week ago and thought that it was about time to send the bug report to bugtraq. This is regarding a logic but in the shadow suite that enables a brute force attack for finding and cracking login in accounts via...

CVE-1999-0856

login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist...

PT-1999-1409 · Slackware · Slackware

Name of the Vulnerable Software and Affected Versions: Slackware version 7.0 Description: The issue allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist. Recommendations: For Slackware version 7.0, update to a...

Security Patches for Slackware 7.0 Available

...

Security Fixes for Slackware 4.0 Available

...

upgrade.sendmail.8x.txt

Seems to me there's something really bad about software vendors. First of all, if author of program finds bug in it - even when this bug seems to be nasty - very often, he'll silently fix it, even without mentioning it in CHANGES blessed those who put there text like 'some security fixes', at lea...

CA-99-13: minimal fix for Slackware 3.5 through 4.0

...

CVE-1999-0340

Buffer overflow in Linux Slackware crond program allows local users to gain root access...

CVE-1999-0340

Summary (CVE-1999-0340): A buffer overflow in the Linux Slackware crond program allows local users to gain root access . The published data identifies the attack as local with low complexity and no authentication required, and it results in full compromise of confidentiality, integrity, and avail...

cron_root_patch.txt

Subject: Vixie Cron version 3.0pl1 vulnerable to root exploit To: [email protected] Vixie Cron version 3.0pl1 vulne.ems Content-Type: text/plain; charset=us-ascii PGP Signature Status: unknown Signer: Unknown, Key ID xAE8F7CF5 Signed: 8/28/99 11:42:41 PM Verified: 9/22/99 1:44:11 AM BEGIN...

VMWare_exploit.txt

Subject: Re: VMWare Advisory.. - exploit To: [email protected] / VMware v1.0.1 root sploit funkySh 02/07/99 1. Redhat 5.2 2.2.9 offset 800-1100 2. offset 1600-2200 1. Slackware 3.6 2.2.9 offset 0 2. offset ? 1 - started from xterm on localhost 2 - started from telnet, with valid display /...