Debian Essential And Critical Security Patch Updates - Page 330

Debian: Critical Buffer Overflow Fixes For Procmail Update

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

A new version of procmail has been released which fixes a couple of buffer overflows and has extra security checks.

LinuxSecurity.com Team
Dec 13, 1999

Debian GNU/Linux 2.0: Security Advisory for Lsof Critical Fix

We have received reports that the lsof package is distributed in Debian GNU/Linux 2.0 contains a buffer overflow. Using this overflow it is possible for local users to gain root-access. We have fixed this problem in version 4.37-3.

LinuxSecurity.com Team
Dec 13, 1999

Debian: Important Cfengine Upgrade For Symlink Attack Risk

The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet.

LinuxSecurity.com Team
Dec 13, 1999

Debian GNU/Linux 2.0: wu-ftpd-academ Critical Buffer Overflow Fix

We have received reports that the wu-ftpd-academ package as distributed in Debian GNU/Linux 2.0 is vulnerable to a buffer overflow. Using this vulnerability, known as palmetto, it is possible to gain shell access or otherwise circumvent normal login access and logging mechanisms.

LinuxSecurity.com Team
Dec 13, 1999

Debian 2.0: Proftpd Security Advisory Moderate: Critical Buffer Overflow

We have received reports that the proftpd package as distributed in Debian GNU/Linux 2.0 is vulnerable to a buffer overflow. Using this vulnerability, known as palmetto, it is possible to gain shell access or otherwise circumvent normal login access and logging mechanisms.