Slackware Essential And Critical Security Patch Updates - Page 76
Find the information you need for your favorite open source distribution .
Find the information you need for your favorite open source distribution .
Sudo 1.6.3p6 is now available for Slackware 7.1 and Slackware -current. This release fixes a known buffer overflow.
Multiple vulnerabilities exist in the versions of BIND found in Slackware7.1 and -current.
glibc-2.2 contains a local vulnerability that affects all setuid rootbinaries.
Pine versions 4.21 and before contain a buffer overflow vulnerability which allows a remote user to execute arbitrary code on the local client by the sending of a special-crafted email message.
Several security problems have been found in the Apache web server software. It is recommended that all users of Apache upgrade to the latest stable release to fix these problems.
A vulnerability involving an input validation error in the "site exec" command has recently been identified in the wu-ftpd program (CERT Advisory CA-2000-13).
A string format / buffer overflow bug has been discovered in klogd, the kernel logging daemon.
An input validation bug was found to affect Slackware Linux 7.0, 7.1, and -current.
Three locale-related vulnerabilities with glibc 2.1.3 were recentlyreported on BugTraq. These vulnerabilities could allow local users togain root access.
A root exploit was found in the /usr/bin/suidperl5.6.0 program that shipped with the Slackware 7.1 perl.tgz package.
A remote exploit has been found in the FTP daemon, wu-ftpd. This can allow an attacker full access to your machine.
The sgid bit has been removed from this binary to prevent a potential security vulnerability.
Versions of Lynx prior to 2.8.3pre.5 contained numerous security holes which could permit a malicious server to execute arbitrary code on the user's system.
Unauthorized access and other security vulnerabilities are present in emacs and gpm for Slackware 7.0 and slackware-current.