Gentoo Essential and Critical Security Patch Updates - Page 184
Find the information you need for your favorite open source distribution .
Find the information you need for your favorite open source distribution .
Due to a remotely exploitable security hole being discovered thateffects all previous Webmin releases, version 1.070 is now availablefor download
This update fixes a timing-based attack on CBC cipher suites used in SSL and TLS which OpenSSL was found to be vulnerable to.
PHP contains code for preventing direct access to the CGI binary with configure option "--enable-force-cgi-redirect" and php.ini option "cgi.force_redirect".
Overflowing a buffer in nethack may lead to privelige escalation to games uid.
Security flaws have been found in the SYSLINUX installer when running setuid root.
The email variable and the default error page in mailmain 2.1 contains cross site scripting vulnerabilities.
A wave file will let the attacker to execute all the code he wants on the victim.
All versions < 0.2.2 have a major security vulnerability in the directory parser.
The overflow appears when the slocate is run with two parameters: -c and -r, using as arguments a 1024 bytes string.
An attacker may be able to execute arbitrary code by sending a specially crafted e-mail to a system using SpamAssassin's spamc program in BSMTP mode.
Opening a specially crafted text file with vim can execute arbitrary shell commands and pass parameters to them.
According to CERT advisory CA-2003-01 a buffer overflow exists in the minires library embedded in ISC DHCPD versions 3.0 through 3.0.1RC10.
On servers which are configured to allow anonymous read-only access, this bug could be used by anonymous users to gain write privileges.
In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution.
The Internet Software Consortium (ISC) has discovered several buffer overflow vulnerabilities in their implementation of DHCP (ISC DHCPD).
fnord 1.6 contained a buffer overrun in the CGI code. However, since the function does not return, this does not appear to be exploitable.
If you use the wordwrap() function on user-supplied input, a specially-crafted input can overflow the allocated buffer and overwrite the heap.
There is a problem in connection with 16-bit samples from libpng.