FreeBSD-SA-01:01.openssh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:01 Security Advisory FreeBSD, Inc. Topic: Hostile server OpenSSH agent/X11 forwarding Category: core/ports Module: openssh Announced: 2001-01-15 Credits: Markus Friedl...

FreeBSD-SA-00:81.ethereal

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:81 Security Advisory FreeBSD, Inc. Topic: ethereal allows remote code execution Category: ports Module: ethereal Announced: 2000-12-20 Credits: [email protected] Affects:...

FreeBSD-SA-00:78.bitchx

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:78 Security Advisory FreeBSD, Inc. Topic: bitchx/ko-bitchx allows remote code execution REVISED Category: ports Module: bitchx/ko-bitchx Announced: 2000-12-20 Reissued:...

FreeBSD-SA-00:79.oops

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:79 Security Advisory FreeBSD, Inc. Topic: oops allows remote code execution Category: ports Module: oops Announced: 2000-12-20 Credits: |CyRaX| Affects: Ports collection...

FreeBSD-SA-00:80.halflifeserver

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:80 Security Advisory FreeBSD, Inc. Topic: halflifeserver allows remote code execution Category: ports Module: halflifeserver Announced: 2000-12-20 Credits: Mark Cooper...

FreeBSD-SA-00:77.procfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:77 Security Advisory FreeBSD, Inc. Topic: Several vulnerabilities in procfs REVISED Category: core Module: procfs Announced: 2000-12-18 Reissued: 2000-12-29 Affects:...

FreeBSD-SA-00:71.mgetty

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:71 Security Advisory FreeBSD, Inc. Topic: mgetty can create or overwrite files Category: ports Module: mgetty Announced: 2000-11-20 Credits: Stan Bubrouski Affects: Ports...

FreeBSD-SA-00:72.curl

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:72 Security Advisory FreeBSD, Inc. Topic: curl client-side vulnerability Category: ports Module: curl Announced: 2000-11-20 Credits: Wichert Akkerman Affects: Ports...

FreeBSD-SA-00:76.tcsh-csh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:76 Security Advisory FreeBSD, Inc. Topic: tcsh/csh creates insecure temporary file Category: core, ports Module: tcsh, 44bsd-csh Announced: 2000-11-20 Affects: FreeBSD...

FreeBSD-SA-00:75.php

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:75 Security Advisory FreeBSD, Inc. Topic: modphp3/modphp4 allows remote code execution Category: ports Module: modphp3/modphp4 Announced: 2000-11-20 Credits: Jouko...

FreeBSD-SA-00:73.thttpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:73 Security Advisory FreeBSD, Inc. Topic: thttpd allows remote reading of local files Category: ports Module: thttpd Announced: 2000-11-20 Credits: [email protected]...

FreeBSD-SA-00:74.gaim

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:74 Security Advisory FreeBSD, Inc. Topic: gaim remote vulnerability Category: ports Module: gaim Announced: 2000-11-20 Credits: Stan Bubrouski Affects: Ports collection...

FreeBSD-SA-00:69.telnetd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:69 Security Advisory FreeBSD, Inc. Topic: telnetd allows remote system resource consumption REVISED Category: core Module: telnetd Announced: 2000-11-14 Revised:...

FreeBSD-SA-00:70.ppp-nat

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:70 Security Advisory FreeBSD, Inc. Topic: ppp "denyincoming" does not correctly deny incoming packets Category: core Module: ppp Announced: 2000-11-14 Credits: Robin...

FreeBSD-SA-00:68.ncurses

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:68 Security Advisory FreeBSD, Inc. Topic: ncurses allows local privilege escalation REVISED Category: core, ports Module: ncurses Announced: 2000-11-13 Revised: 2000-11-2...

FreeBSD-SA-00:67.gnupg

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:67 Security Advisory FreeBSD, Inc. Topic: gnupg fails to correctly verify signatures Category: ports Module: gnupg Announced: 2000-11-10 Credits: Jim Small Affects: Ports...

FreeBSD-SA-00:64.global

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:64 Security Advisory FreeBSD, Inc. Topic: global port allows remote compromise through CGI script Category: ports Module: global Announced: 2000-11-06 Credits: Shigio...

FreeBSD-SA-00:66.netscape

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:66 Security Advisory FreeBSD, Inc. Topic: Client vulnerability in Netscape Category: ports Module: netscape Announced: 2000-11-06 Credits: Michal Zalewski Affects: Ports...

FreeBSD-SA-00:65.xfce

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:65 Security Advisory FreeBSD, Inc. Topic: xfce allows local X session compromise Category: ports Module: xfce Announced: 2000-11-06 Credits: Nicholas Brawn Affects: Ports...

FreeBSD-SA-00:62.top

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:62 Security Advisory FreeBSD, Inc. Topic: top allows reading of kernel memory REISSUED Category: core Module: top Announced: 2000-11-01 Reissued: 2000-11-06 Credits:...

FreeBSD-SA-00:63.getnameinfo

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:63 Security Advisory FreeBSD, Inc. Topic: getnameinfo function allows remote denial of service Category: core Module: libc Announced: 2000-11-01 Credits: Pavel Kankovsky...

FreeBSD-SA-00:61.tcpdump

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:61 Security Advisory FreeBSD, Inc. Topic: tcpdump contains remote vulnerabilities REISSUED Category: core Module: tcpdump Announced: 2000-10-31 Reissued: 2000-11-06...

FreeBSD-SA-00:58.chpass

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:58 Security Advisory FreeBSD, Inc. Topic: chpass family contains local root vulnerability Category: core Module: chfn/chpass/chsh/ypchfn/ypchpass/ypchsh/passwd Announced:...

FreeBSD-SA-00:60.boa

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:60 Security Advisory FreeBSD, Inc. Topic: boa web server allows arbitrary file access/execution Category: ports Module: boa Announced: 2000-10-30 Credits: Lluis Mora...

FreeBSD-SA-00:59.pine

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:59 Security Advisory FreeBSD, Inc. Topic: pine4 port contains remote vulnerability Category: ports Module: pine4/pine4-ssl/zh-pine4/iw-pine4 Announced: 2000-10-30 Affects...

FreeBSD-SA-00:56.lprng

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:56 Security Advisory FreeBSD, Inc. Topic: LPRng contains potential root compromise Category: ports Module: LPRng Announced: 2000-10-13 Credits: Chris Evans Affects: Ports...

FreeBSD-SA-00:54.fingerd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:54 Security Advisory FreeBSD, Inc. Topic: fingerd allows remote reading of filesystem Category: core Module: fingerd Announced: 2000-10-13 Credits: NIIMI Satoshi Affects:...

FreeBSD-SA-00:57.muh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:57 Security Advisory FreeBSD, Inc. Topic: muh IRC bouncer remote vulnerability Category: ports Module: muh Announced: 2000-10-13 Credits: Maxime Henrion Affects: Ports...

FreeBSD-SA-00:55.xpdf

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:55 Security Advisory FreeBSD, Inc. Topic: xpdf contains multiple vulnerabilities Category: ports Module: xpdf Announced: 2000-10-13 Credits: Unknown Affects: Ports...

FreeBSD-SA-00:52.tcp-iss

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:52 Security Advisory FreeBSD, Inc. Topic: TCP uses weak initial sequence numbers Category: core Module: kernel Announced: 2000-10-06 Credits: Hacker Emergency Response...

FreeBSD-SA-00:53.catopen

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:53 Security Advisory FreeBSD, Inc. Topic: catopen may pose security risk for third party code Category: core Module: libc Announced: 2000-09-27 Affects: FreeBSD...

FreeBSD-SA-00:47.pine

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:47 Security Advisory FreeBSD, Inc. Topic: pine4 port allows denial of service Category: ports Module: pine4 Announced: 2000-09-13 Affects: Ports collection. Corrected:...

FreeBSD-SA-00:49.eject

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:49 Security Advisory FreeBSD, Inc. Topic: eject port allows local root exploit Category: ports Module: eject Announced: 2000-09-13 Affects: Ports collection. Corrected:...

FreeBSD-SA-00:46.screen

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:46 Security Advisory FreeBSD, Inc. Topic: screen port contains local root compromise Category: ports Module: screen Announced: 2000-09-13 Affects: Ports collection prior...

FreeBSD-SA-00:50.listmanager

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:50 Security Advisory FreeBSD, Inc. Topic: listmanager port allows local root compromise Category: ports Module: listmanager Announced: 2000-09-13 Affects: Ports...

FreeBSD-SA-00:48.xchat

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:48 Security Advisory FreeBSD, Inc. Topic: xchat port inappropriately handles URLs Category: ports Module: xchat, xchat-devel Announced: 2000-09-13 Affects: Ports...

FreeBSD-SA-00:51.mailman

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:51 Security Advisory FreeBSD, Inc. Topic: mailman port allows local root compromise Category: ports Module: mailman Announced: 2000-09-13 Affects: Ports collection...

FreeBSD-SA-00:45.esound

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:45 Security Advisory FreeBSD, Inc. Topic: esound port allows file permissions to be modified Category: ports Module: esound Announced: 2000-08-31 Credits: Brian Feldman...

FreeBSD-SA-00:43.brouted

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:43 Security Advisory FreeBSD, Inc. Topic: brouted port allows gid kmem compromise Category: ports Module: brouted Announced: 2000-08-28 Credits: Discovered during interna...

FreeBSD-SA-00:44.xlock

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:44 Security Advisory FreeBSD, Inc. Topic: xlockmore port allows reading of password file Category: ports Module: xlockmore Announced: 2000-08-28 Credits: bind Affects:...

FreeBSD-SA-00:41.elf

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:41 Security Advisory FreeBSD, Inc. Topic: Malformed ELF images can cause a system hang Category: core Module: kernel Announced: 2000-08-28 Credits: Adam McDougall Affects...

FreeBSD-SA-00:42.linux

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:42 Security Advisory FreeBSD, Inc. Topic: Linux binary compatability mode can cause system compromise Category: core Module: kernel Announced: 2000-08-28 Credits: Boris...

FreeBSD-SA-00:40.mopd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:40 Security Advisory FreeBSD, Inc. Topic: mopd port allows remote root compromise Category: ports Module: mopd Announced: 2000-08-28 Credits: Matt Power , OpenBSD Affects...

FreeBSD-SA-00:39.netscape

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:39 Security Advisory FreeBSD, Inc. Topic: Two vulnerabilities in Netscape Category: ports Module: netscape Announced: 2000-08-28 Credits: Solar Designer Vulnerability 1...

FreeBSD-SA-00:34.dhclient

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:34 Security Advisory FreeBSD, Inc. Topic: dhclient vulnerable to malicious dhcp server Category: core, ports Module: dhclient, isc-dhcp2 ports, isc-dhcp3 ports Announced:...

FreeBSD-SA-00:36.ntop

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:36 Security Advisory FreeBSD, Inc. Topic: ntop port allows remote and minor local compromise Category: ports Module: ntop Announced: 2000-08-14 Credits: Discovered during...

FreeBSD-SA-00:38.zope

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:38 Security Advisory FreeBSD, Inc. Topic: zope port allows remote modification of DTML documents Category: ports Module: zope Announced: 2000-08-14 Credits: Unknown...

FreeBSD-SA-00:37.cvsweb

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:37 Security Advisory FreeBSD, Inc. Topic: cvsweb allows increased access to CVS committers Category: ports Module: cvsweb Announced: 2000-08-14 Credits: Joey Hess Affects...

FreeBSD-SA-00:35.proftpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:35 Security Advisory FreeBSD, Inc. Topic: proftpd port contains remote root compromise Category: ports Module: proftpd Announced: 2000-08-14 Credits: lamagra Affects:...

FreeBSD-SA-00:33.kerberosIV

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:33 Security Advisory FreeBSD, Inc. Topic: kerberosIV distribution contains multiple vulnerabilities under FreeBSD 3.x Category: core Module: kerberosIV Announced:...