Fedora Essential and Critical Security Patch Updates - Page 1104

Fedora: 2003-004 Critical Update: Apache Buffer Overflow Threat

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This update includes the latest stable release of Apache httpd 2.0,including a fix for the security issue CVE CAN-2003-0542, a bufferoverflow in the parsing of configuration files.

LinuxSecurity.com Team
Jan 08, 2004

Fedora Kernel 2.4.22 Moderate: Privilege Escalation by Paul Starzetz

Paul Starzetz discovered a flaw in bounds checking in mremap() in the Linux kernel versions 2.4.23 and previous which may allow a local attacker to gain root privileges.

LinuxSecurity.com Team
Jan 06, 2004

Fedora: 2003-040 High Severity: Ethereal Malformed Packet Crashes

Both vulnerabilities will make the Ethereal application crash. The Q.931 vulnerability also affects Tethereal. It is not known if either vulnerability can be used to make Ethereal or Tethereal run arbitrary code.

LinuxSecurity.com Team
Dec 19, 2003

Fedora LFTP Update: 2023-057 Critical Buffer Overflow Risk

An attacker could create a carefully crafted directory on a websitesuch that, if a user connects to that directory using the lftp clientand subsequently issues a 'ls' or 'rels' command, the attacker couldexecute arbitrary code on the users machine.

LinuxSecurity.com Team
Dec 15, 2003

CentOS: 2003-032 Critical: GnuPG ElGamal Key Exposure Issue

Phong Nguyen identified a severe bug in the way GnuPG creates anduses ElGamal keys, when those keys are used both to sign and encryptdata. This vulnerability can be used to trivially recover theprivate key.