[SECURITY] Fedora 8 Update: emacs-22.1-8.fc8

Emacs is a powerful, customizable, self-documenting, modeless text editor. Emacs contains special code editing features, a scripting language elisp, and the capability to read mail, news, and more without leaving the editor. This package provides an emacs binary with support for X windows...

AIX 5.2 : IY53519

The remote host is missing AIX Critical Security Patch number IY53519 SECURITY: BUFFER OVERFLOW IN X-WINDOWS FONT LIBRARY. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

libXpm library contains multiple integer overflow vulnerabilities

Overview libXpm contains multiple integer overflow vulnerabilities that may allow an attacker to cause a denial-of-service condition or execute arbitrary code. Description XPM is a format for encoding and decoding X PixMap images that is used in the X Windows System 11 X11. libXpm is a library of...

AIX 5.1 : IY53673

The remote host is missing AIX Critical Security Patch number IY53673 SECURITY: Buffer overflow in X-Windows font library. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

CVE-2002-0795

CVE-2002-0795 affects the FreeBSD rc startup script (FreeBSD 4–4.5). The root cause is a symlink attack on X Window system lock files that allows local users to delete arbitrary files. Exploitation details are not provided in the available documents, so the exact steps and vulnerable files are no...

CVE-2002-0795

The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files...

remote DoS in Mozilla 1.0

Author ====== Tom Vogt [email protected] http://web.lemuria.org/ Affected ======== Mozilla 1.0 and earlier verified on Linux and Solaris, other Unixes most likely affected as well. Effect ====== System becomes unuseable or X windows crashes varies depending on system configuration Description...

FreeBSD-SA-02:27.rc

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:27.rc Security Advisory The FreeBSD Project Topic: rc uses file globbing dangerously Category: core Module: rc Announced: 2002-05-29 Credits: lumpy Affects: FreeBSD...

CVE-1999-1133

CVE-1999-1133 affects HP-UX 9.x and 10.x running X Windows. Local attackers can gain privileges via the unauthenticated components vuefile, vuepad, dtfile, or dtpad. The provided sources describe the vulnerable components and the privilege escalation vector but do not specify a patch or remediati...

CVE-1999-1133

HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via 1 vuefile, 2 vuepad, 3 dtfile, or 4 dtpad, which do not authenticate users...

CVE-2001-0191

gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length...

CVE-2001-0191

gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length...

CVE-2000-1060

The CVE-2000-1060 entry describes a vulnerability in XFCE 3.5.1 where the default xinitrc configuration runs xhost + localhost, bypassing Xauthority access control. This local-privilege issue allows nearby users to sniff X11 traffic and potentially escalate privileges. The root cause is the insec...

CVE-2000-1060

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges...

scx-sa-11.txt

============================================================================= Securax-SA-11 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: X-windows can be caused to freeze. Announced: 2000-12-26 Affects:...

CVE-2000-1060

The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges...

xsoldier (FreeBSD 3.3Linux Mandrake 7.0) - Local Buffer Overflow (2)

xsoldier FreeBSD 3.3Linux Mandrake 7.0 - Local Buffer Overflow 2 / source: https://www.securityfocus.com/bid/871/info Certain versions of FreeBSD 3.3 Confirmed and Linux Mandrake confirmed ship with a vulnerable binary in their X11 games package. The binary/game in question, xsoldier, is a setuid...

Flying.txt

Vulnerability: Any user can read any file in the system. title=Flying rev. 6.20 author=Helmut Hoenig system=tested on Redhat 5.2, possibly others [email protected] Grampa Elite Overview: Flying is a X-Windows program I have found installed on Redhat 5.2 that is actually a gateway for...

CVE-1999-0241

Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm...

CVE-1999-0241

The provided connected documents confirm CVE-1999-0241 affects X Windows (X11) with a vulnerability in the authentication cookies: guessable magic cookies allow remote attackers to execute commands (e.g., via xterm). Root cause is guessable, enabling remote command execution with no authenticatio...