Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Find the information you need for your favorite open source distribution .
xmonisdn which is part of the i4l package is installed setuid root by default. To control and display the status of the ISDN network connections xmonisdn uses external programs, which are executed by the system() systemcall, without taking care of a safe environment. The problem arises by old libc, that don't overwrite the IFS environment variable.
a) A setuid root installed smbmnt could lead to a security breach due to a race condition. b) The NetBIOS name server nmbd is vulnerable to a denial-of-service attack. c) The message service of the SMB-/CIFS-server has got a buffer overflow.
The KDE screensaver klock includes a bug, which allows to bypass the password authentication. While klock waits for kcheckpass to verify the password a timer is triggered and the dialog box is deleted. After kcheckpass completes klock crashs.
The zsoelim program, which is part of the man package, creates files in /tmp without security checkings.
By sending a malicious formated email pine could be tricked into executing shell scripts or binary programs.
Like staying secure? So do we.
Sign up for updates, tips, and alerts!
