Important: Red Hat Security Advisory: : Updated kernel resolves security vulnerability

Updated kernel packages are now available that fix a security vulnerability which may allow local users to gain root privileges. The Linux kernel handles the basic functions of the operating system. Paul Starzetz discovered a flaw in bounds checking in mremap in the Linux kernel versions 2.4.23 a...

MDKSA-2003:112-1 - Updated cvs packages fix malformed module request vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: cvs Advisory ID: MDKSA-2003:112-1 Date: December 10th, 2003 Original Advisory Date: December 8th, 2003 Affected versions: 9.1, 9.2 Problem Description: A vulnerability was discovered in the CVS...

[RHSA-2003:311-01] Updated Pan packages fix denial of service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated Pan packages fix denial of service vulnerability Advisory ID: RHSA-2003:311-01 Issue date: 2003-11-24 Updated on: 2003-11-24 Product: R...

[RHSA-2003:307-01] Updated zebra packages fix security vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated zebra packages fix security vulnerabilities Advisory ID: RHSA-2003:307-01 Issue date: 2003-11-13 Updated on: 2003-11-13 Product: Red Ha...

Moderate: Red Hat Security Advisory: : Updated Ethereal packages fix security issues

Updated Ethereal packages that fix a number of exploitable security issues are now available. Ethereal is a program for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues, it may be possible to make Ethereal crash or run arbitrary code by injecting...

Moderate: Red Hat Security Advisory: : Updated CUPS packages fix denial of service

Updated CUPS packages that fix a problem where CUPS can hang are now available. CUPS is a print spooler. Paul Mitcheson reported a situation where the CUPS Internet Printing Protocol IPP implementation in CUPS versions prior to 1.1.19 would get into a busy loop. This could result in a denial of...

GuppY : XSS, Files Reading/Writing

Informations : °°°°°°°°°°°°° Language : PHP Bugged Version : 2.4p3 and less ? Patched version : 2.4p4 Website : http://www.freeguppy.org Problems : - Permanent XSS - Files Reading - Files Writing PHP Code/Location : °°°°°°°°°°°°°°°°°°° postguest.php :...

GuppY 2.4 - HTML Injection

source: https://www.securityfocus.com/bid/8717/info It has been reported that one of the scripts included with GuppY is vulnerable to an HTML injection attack. The script, "postguest.php", does not perform input validation to prevent the inclusion of HTML/script content in messages posted to the...

(RHSA-2003:268) New up2date available with updated SSL certificate authority file

The rhnregister and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. This erratum includes an updated RHNS-CA-CERT file, which contains a new CA certificate. This new certificate is needed so that up2date can continue to communicate with Red Hat...

[Full-Disclosure] MDKSA-2003:086 - Updated sendmail packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: sendmail Advisory ID: MDKSA-2003:086 Date: August 26th, 2003 Affected versions: 8.2, 9.0, Corporate Server 2.1 Problem Description: A vulnerability was discovered in all 8.12.x versions of sendmail...

Important: Red Hat Security Advisory: : : : Updated Mozilla packages fix security vulnerability.

Updated Mozilla packages fixing various bugs and security issues are now available. Updated 18 July 2003 Our Mozilla packages were found to be incompatible with Galeon. Updated versions of Galeon are now included for Red Hat Linux 7.2, 7.3, and 8.0. In addition new builds of Mozilla for Red Hat...

Moderate: Red Hat Security Advisory: : : : Updated unzip and tar packages that fix vulnerabilities are now available

Updated unzip and tar packages are available for IBM iSeries and pSeries systems. These packages resolve vulnerabilities allowing arbitrary files to be overwritten during archive extraction. The unzip and tar utilities are used for manipulating archives, which are multiple files stored inside of ...

Moderate: Red Hat Security Advisory: : Updated ypserv packages fix a denial of service vulnerability

Updated ypserv packages fixing a denial of service vulnerability are now available. The ypserv package contains the Network Information Service NIS server. A vulnerability has been discovered in the ypserv NIS server prior to version 2.7. If a malicious client queries ypserv via TCP and...

[RHSA-2003:036-01] Updated mgetty packages available

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated mgetty packages available Advisory ID: RHSA-2003:036-01 Issue date: 2003-04-08 Updated on: 2003-04-08 Product: Red Hat Linux Keywords: mgetty spool permission Cross references:...

Protegrity Secure.Data for Microsoft SQL Server 2000 contains buffer overflows in extended stored procedures

Overview Protegrity Secure.Data for Microsoft SQL Server 2000 includes several extended stored procedures that contain buffer overflow vulnerabilities. These vulnerabilities could allow a remote attacker to execute arbitrary code, gain access to databases, or cause a denial of service. Descriptio...

[RHSA-2003:043-12] Updated WindowMaker packages fix vulnerability in theme-loading

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated WindowMaker packages fix vulnerability in theme-loading Advisory ID: RHSA-2003:043-12 Issue date: 0000-01-01 Updated on: 2003-02-05 Product: Red Hat Linux Keywords:...

Critical: Red Hat Security Advisory: : Updated openldap packages available

Updated openldap packages are available which fix a number of local and remote buffer overflows in libldap and the slapd and slurpd servers, and potential issues stemming from using user-specified LDAP configuration files. OpenLDAP is a suite of LDAP Lightweight Directory Access Protocol...

SIGCHLD problem in Stunnel

Date: Sun, 12 Jan 2003 16:57:02 +0100 From: Michal Trojnara [email protected] To: [email protected], [email protected], [email protected] Subject: Stunnel 4.04 released -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Version 4.04, 2003.01.12, urgency: MEDIUM: New feature...

Moderate: Red Hat Security Advisory: mod_ssl security update

Updated modssl packages are now available for Red Hat Advanced Server. These updates incorporate a fix for an incorrect bounds check in versions of modssl up to and including version 2.8.9. The modssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL a...

Important: Red Hat Security Advisory: : Updated mailman packages available

Updated mailman packages are now available for Red Hat Secure Web Server 3.2 U.S.. These updates resolve a cross-site scripting vulnerability present in versions of Mailman prior to 2.0.11. Two cross-site scripting vulnerabilities have been discovered in versions of Mailman prior to version 2.0.1...