SuSE Essential and Critical Security Patch Updates - Page 1165

OpenSUSE: Urgent Advisory for trn Package Critical File Overwrite Issue

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The news reader trn uses a hardcoded temporary file, which resides in /tmp.

LinuxSecurity.com Team
Dec 08, 1999

SuSE Linux Termcap Update: Critical Buffer Overflow Risk

A buffer overflow has been found in libtermcap's tgetent() function. If a setuid root program uses this function, the user could execute arbitrary code. SuSE Linux 6.0, 6.1 and 6.2 are not affected, since the only program using libtermcap is bc. This program is not setuid root.

LinuxSecurity.com Team
Dec 08, 1999

SuSE: Critical i4l (xmonisdn) Privilege Escalation Risk

xmonisdn which is part of the i4l package is installed setuid root by default. To control and display the status of the ISDN network connections xmonisdn uses external programs, which are executed by the system() systemcall, without taking care of a safe environment. The problem arises by old libc, that don't overwrite the IFS environment variable.

LinuxSecurity.com Team
Dec 08, 1999

SuSE Samba 2.0.5 Security Notice: Setuid Race Condition and DoS Risk

a) A setuid root installed smbmnt could lead to a security breach due to a race condition. b) The NetBIOS name server nmbd is vulnerable to a denial-of-service attack. c) The message service of the SMB-/CIFS-server has got a buffer overflow.

LinuxSecurity.com Team
Dec 08, 1999

SuSE: Kbase 1.1 Critical Advisory for Klock Bypass Threat

The KDE screensaver klock includes a bug, which allows to bypass the password authentication. While klock waits for kcheckpass to verify the password a timer is triggered and the dialog box is deleted. After kcheckpass completes klock crashs.