Debian Essential And Critical Security Patch Updates - Page 329

Debian 2.1: Update Kernel Image to Address DoS Vulnerabilities Now

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

As is widely known by now the Linux 2.2.x kernels had a problem with parsing IP options, which made them susceptible to a DoS attack.

LinuxSecurity.com Team
Dec 13, 1999

Debian: 2.1 Security Advisory: ipopd Remote Shell Access Exploit

We have received reports that the version of the imap suite in Debian GNU/Linux 2.1 has a vulnerability in its POP-2 daemon, which can be found in the ipopd package. Using this vulnerability it is possible for remote users to get a shell as user "nobody" on the server.

LinuxSecurity.com Team
Dec 13, 1999

Debian: Critical Buffer Overflow Fixes For Procmail Update

A new version of procmail has been released which fixes a couple of buffer overflows and has extra security checks.

LinuxSecurity.com Team
Dec 13, 1999

Debian GNU/Linux 2.0: Security Advisory for Lsof Critical Fix

We have received reports that the lsof package is distributed in Debian GNU/Linux 2.0 contains a buffer overflow. Using this overflow it is possible for local users to gain root-access. We have fixed this problem in version 4.37-3.

LinuxSecurity.com Team
Dec 13, 1999

Debian: Important Cfengine Upgrade For Symlink Attack Risk

The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet.