210 matches found
[SECURITY] [DSA 011-2] New mgetty packages for m68k and powerpc available
---------------------------------------------------------------------------- Debian Security Advisory DSA-011-2 [email protected] http://www.debian.org/security/ Martin Schulze March 6, 2001 - ---------------------------------------------------------------------------- Package : mgetty...
[SECURITY] [DSA 030-2] New m68k packages of XFree86 released
---------------------------------------------------------------------------- Debian Security Advisory DSA 030-2 [email protected] http://www.debian.org/security/ Martin Schulze February 12, 2001 - ---------------------------------------------------------------------------- Package : xfree86-1...
[SECURITY] [DSA-030-1] Multiple security problems in X
Package : xfree86-1 Vulnerability : buffer overflow, insecure tempfile handling, denial-of-service attack Debian-specific: no Chris Evans, Joseph S. Myers, Michal Zalewski, Alan Cox, and others have noted a number of problems in several components of the X Window System sample implementation from...
[SECURITY] [DSA 023-1] New version of inn2 released
---------------------------------------------------------------------------- Debian Security Advisory DSA-023-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26, 2001 - ---------------------------------------------------------------------------- Package : inn2...
[SECURITY] [DSA 022-1] New version of exmh released
---------------------------------------------------------------------------- Debian Security Advisory DSA-022-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26, 2001 - ---------------------------------------------------------------------------- Package : exmh...
[SECURITY] [DSA 021-1] New version of Apache released
---------------------------------------------------------------------------- Debian Security Advisory DSA-021-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26, 2001 - ---------------------------------------------------------------------------- Package : apache...
[SECURITY] [DSA 019-1] New version of squid released
---------------------------------------------------------------------------- Debian Security Advisory DSA-019-1 [email protected] http://www.debian.org/security/ Martin Schulze January 25, 2001 - ---------------------------------------------------------------------------- Package : squid...
tcsh: unsafe tempfile in << redirects
PROBLEM: /tmp echo 'hello world' rootfile /tmp chmod 600 rootfile /tmp ln -s rootfile sh$$ /tmp chown -h 666.666 sh$$ /tmp ls -l rootfile sh$$ -rw------- 1 root root 12 Oct 29 03:55 rootfile lrwxrwxrwx 1 666 666 8 Oct 29 03:56 sh12660 - rootfile /tmp cat BAR ? FOO ? BAR FOO o world /tmp ls -l...
Predictability Problems in IRIX Cron and Compilers
Crimelabs, Inc. www.crimelabs.com Security Note Crimelabs Security Note CLABS200004 Title: Poor Tempfile Use in IRIX: Compilers and Cron Date: 21 June, 2000 Application: MIPSPro Compilers 7.1, 7.2.1 tested, cron Platforms: IRIX 6.3, 6.5 Severity: Moderate, higher in some instances Author: Jose...
mutt.tempfile.race.txt
Date: Sun, 28 Feb 1999 09:28:43 +0100 From: Thomas Roessler To: [email protected] Subject: mutt security tempfile race in mutt Parts/Attachments: 1.1 Shown 39 lines Text 1.2 OK 134 lines Text 2 475 bytes Application ---------------------------------------- An anonymous Debian developer forward...