Moderate: Red Hat Security Advisory: freeradius security update

Updated FreeRADIUS packages are now available that fix a denial of service vulnerability. FreeRADIUS is an Internet authentication daemon, which implements the RADIUS protocol. It allows Network Access Servers NAS boxes to perform authentication for dial-up users. The raddecode function in...

Low: Red Hat Security Advisory: pan security update

Updated Pan packages that close a denial of service vulnerability are now available. Pan is a Gnome/GTK+ newsreader. A bug in Pan versions prior to 0.13.4 can cause Pan to crash when parsing an article header containing a very long author email address. This bug causes a denial of service crash,...

Low: Red Hat Security Advisory: semi security update

Updated semi packages that fix vulnerabilities in semi's temporary file handling are now available. semi is a MIME library for GNU Emacs and XEmacs used by the wl mail package. A vulnerability in semi version 1.14.3 and earlier allows an attacker to overwrite arbitrary files with potentially...

Moderate: Red Hat Security Advisory: apache security update

Updated Apache and modssl packages that fix several minor security issues are now available for Red Hat Enterprise Linux. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Ben Laurie found a bug in the optional renegotiation code in modssl which can...

DSA-383 ssh-krb5 - possible remote vulnerability

Bulletin has no description...

Important: Red Hat Security Advisory: pam_smb security update

Updated pamsmb packages are now available which fix a security vulnerability buffer overflow. The pamsmb module is a pluggable authentication module PAM used to authenticate users using an external Server Message Block SMB server. A buffer overflow vulnerability has been found that affects...

Important: Red Hat Security Advisory: mysql security update

Updated packages are available that fix both a double-free security vulnerability and a remote root exploit security vulnerability found in the MySQL server. Updated 11 Aug 2003 Updated mysqlclient9 packages are now included. These were previously missing from this erratum. MySQL is a multi-user,...

Important: Red Hat Security Advisory: mod_auth_any security update

Updated modauthany packages are available for Red Hat Enterprise Linux. These updated packages fix vulnerabilities associated with the manner in which modauthany escapes shell arguments when calling external programs. The Web server module modauthany allows the Apache httpd server to call arbitra...

Important: Red Hat Security Advisory: tomcat security update for Stronghold

Updated tomcat packages are now available for Stronghold 4.0 to close a second JSP source code exposure vulnerability. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. A source code exposure vulnerability...

Sendmail 8.12.x - Header Processing Buffer Overflow (2)

Sendmail 8.12.x - Header Processing Buffer Overflow 2 // source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers...

Sendmail 8.12.x - Header Processing Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers. Reportedly, this vulnerability may be locally...

Sendmail 8.12.x - Header Processing Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers. Reportedly, this vulnerability may be locally...

Sendmail 8.12.x - Header Processing Buffer Overflow (1)

Sendmail 8.12.x - Header Processing Buffer Overflow 1 // source: https://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers...

Important: Red Hat Security Advisory: xpdf security update

Updated Xpdf packages are available to fix a vulnerability where a malicious PDF document could run arbitrary code. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 Xpdf is an X Window System based viewer for Portable Document Format PDF files. During an audit of CUPS, a...

Important: Red Hat Security Advisory: mysql security update

Updated packages are available for Red Hat Linux Advanced Server 2.1 that fix security vulnerabilities found in the MySQL server. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 MySQL is a multi-user, multi-threaded SQL database server. While auditing MySQL, Stefan Esser fou...

Critical: Red Hat Security Advisory: fetchmail security update

Updated Fetchmail packages are available for Red Hat Linux Advanced Server which close a remotely-exploitable vulnerability in unpatched versions of Fetchmail prior to 6.2.0. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation Fetchmail is a remote mail retrieval and forwarding...

Web Server HTTP Header Handling Remote Overflow

It was possible to kill the web server by sending an invalid request with a long header name or value. A remote attacker may exploit this vulnerability to make the web server crash continually or even execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...

OpenSSH 3.x - Challenge-Response Buffer Overflow (2)

OpenSSH 3.x - Challenge-Response Buffer Overflow 2 source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to th...

SpoonFTP Buffer Overflow Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= SpoonFTP Buffer Overflow Vulnerabilities =- Release date: Thursday, May 31, 2001 Introduction: SpoonFTP is an ftp server from the hand of the makers of SpoonProxy for the various MS Windows incarnations. SpoonFTP is available from vendor...

(SRPRE00001) phpMyAdmin 2.1.0 and phpPgAdmin 2.2.1

================================================= Secure Reality Pty Ltd. Security Pre-Advisory 1 SRPRE00001 http://www.securereality.com.au ================================================= Title Remote command execution vulnerabilities in phpMyAdmin and phpPgAdmin Released 23/4/2001 This is a...