CVE-2002-0740

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d SPOOLDIR argument...

CVE-2001-1035

The CVE-2001-1035 issue affects slrn up to version 0.9 and earlier, where the binary decoding feature would execute shell scripts embedded in news posts. Exploitation could allow remote attackers to run commands on the affected host. Public references in Debian’s DSA-078-1 (slrn) describe this as...

CVE-2001-1035

Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news post...

CVE-2001-1035

Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news post...

[SECURITY] [DSA-078-1] slrn command invocation

Package : slrn Problem type : remote command invocation Debian-specific: no Byrial Jensen found a nasty problem in slrn a threaded news reader. The notice on slrn-announce describes it as follows: When trying to decode binaries, the built-in code executes any shell scripts the article might...

CVE-2001-0441

Buffer overflow in 1 wrapping and 2 unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header...

CVE-2001-0441

Buffer overflow in 1 wrapping and 2 unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header...

CVE-2001-0441

CVE-2001-0441 describes a buffer overflow in the slrn news reader (wrapping and unwrapping functions) that allows remote code execution via a long message header. The vulnerability affects versions prior to the fixed releases cited in connected advisories: Debian DSA-040-1 and Mandrake MDKSA-2001...

FreeBSD-SA-01:37.slrn

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:37 Security Advisory FreeBSD, Inc. Topic: slrn contains remotely-exploitable buffer overflow Category: ports Module: slrn Announced: 2001-04-23 Credits: Bill Nottingham...

MDKSA-2001:028 - slrn update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: slrn Date: March 9th, 2001 Advisory ID: MDKSA-2001:028 Affected versions: 6.0, 6.1, 7.0, 7.1, 7.2, Corporate Server 1.0.1 Problem Description: A buffer overflow exists in versions of the slrn news...

Дырка в slrn (buffer overflow)

Переполнение буфера при длинном заголовке сообщения...

[SECURITY] [DSA-040-1] slrn buffer overflow

Package : slrn Problem type : buffer overflow Debian-specific: no Bill Nottingham reported a problem in the wrapping/unwrapping functions of the slrn newsreader. A long header in a message might overflow a buffer and which could result into executing arbitraty code encoded in the message. The...

Дырки в утилитах из RedHat

Дырки в утилитах gkermit egid==uucp; slocate gid slocate, slrn, C-Kermit gid=uucp, diskcheck и Mgetty-sendfaxперезапись любого файла, ksu sgid root, eSound, IMAP4rev1 v12.264 DoS,...

Re: rh 6.2 - gid compromises, etc [+ MORE!!!]

Ya know the sad thing is I pointed out these problems in bugzilla posts the gkermit being sgid uucp I reported two+ weeks ago. No response. My description of the gkermit bug which I reported couple weeks ago can be found here: http://bugzilla.redhat.com/bugzilla/showbug.cgi?id=11870 The slrn...