Find the information you need for your favorite open source distribution .
The KDE screensaver klock includes a bug, which allows to bypass the password authentication. While klock waits for kcheckpass to verify the password a timer is triggered and the dialog box is deleted. After kcheckpass completes klock crashs.
The zsoelim program, which is part of the man package, creates files in /tmp without security checkings.
By sending a malicious formated email pine could be tricked into executing shell scripts or binary programs.
The Linux kernel 2.2.x doesn't correctly parse the IP options, which leads to kernel panic.
The innd wrapper inndstart could be tricked to execute arbitrary code by editing the environment (INNCONF), by modifing the inn.conf file or by overflowing a buffer.
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
