SuSE Essential and Critical Security Patch Updates - Page 1143

SuSE: 1999: Security Advisory For Pbpg Critical Access Risk

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The /usr/bin/pg and /usr/bin/pb tools can be used to read any file on the system.

LinuxSecurity.com Team
Dec 08, 1999

SuSE Linux: Critical SCCW Information Disclosure Threat

The /usr/bin/sccw tool can be used to read any file on the system.

LinuxSecurity.com Team
Dec 08, 1999

SuSE Security Advisory: mars_nwe Buffer Overflow Critical Threat

The mars_nwe tools are vulnerable to several buffer overflows.

LinuxSecurity.com Team
Dec 08, 1999

SuSE: Critical Advisory for proftpd Buffer Overflow Remote Exploit

Several buffer overflows have been found in proftpd which have been verified to be exploitable from an remote attacker. The fixing and finding of new holes is going on for over 2 weeks now, and there is no end in sight. Even with all known fixes, proftpd is still vulnerable to remote exploitation.

LinuxSecurity.com Team
Dec 08, 1999

RHEL: apache-2.4.46 High Advisory: Vulnerability In Authentication System

When lynx calls external programs for protocols (e.g. telnet), the location is passed unchecked. This can be used to activate commandline parameters. For example, this reference [A HREF="telnet://-n.rhosts"]click me[/A] would activate the tracefile options on the telnet client, with the result, that a .rhosts in the current directory would created or overwritten.