Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
91
security advisoryGentoomultiple issuesGentoo: GLSA 200406-03 Normal: Multiple Libneon Risks in Sitecopy
sitecopy includes a vulnerable version of the neon library.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200406-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: sitecopy: Multiple vulnerabilities in included libneon Date: June 05, 2004 Bugs: #51585 ID: 200406-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= sitecopy includes a vulnerable version of the neon library. Background ========= sitecopy easily maintains remote websites. It makes it simple to keep a remote site synchronized with the local site with one command. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/sitecopy
Jun 05, 2004
Gentoo
91
security advisorygentoocode executionGentoo GLSA-200405-25 Normal: tla Heap Overflow In libneon
tla includes a vulnerable version of the neon library.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200405-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: tla: Heap-based buffer overflow in included libneon Date: May 30, 2004 Bugs: #51586 ID: 200405-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= tla includes a vulnerable version of the neon library. Background ========= GNU Arch (tla) is a revision control system suited for widely distributed development. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-util/tla < 1.2.1_pre1 > = 1.2.1_pre1 Description ========== Stefan Esser discovered a vulnerability in the code of the neon library (GLSA 200405-13): if a malicious date string is passed to the ne_rfc1036_parse() function, it can trigger a string overflow into static heap variables. tla includes it's own version of the library. Impact ===== When connected to a malicious WebDAV server, this vulnerability could allow execution of arbitrary code with the rights of the user running tla. Workaround ========= There is no known workaround at this time. Resolution ========= All users of tla should upgrade to the latest stable version: # emerge sync # emerge -pv "> =dev-util/tla-1.2.1_pre1" # emerge "> =dev-util/tla-1.2.1_pre1" References ========= [ 1 ] GLSA 200405-13 https://security.gentoo.org/glsa/200405-13 Availability =========== This GLSA andany updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200405-25 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
May 30, 2004
Gentoo
91
security advisoryGentooformat stringGentoo: GLSA-200405-01 Normal: libneon Format String Code Execution
There are multiple format string vulnerabilities in libneon which may allow a malicious WebDAV server to execute arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200405-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Multiple format string vulnerabilities in neon 0.24.4 and earlier Date: May 09, 2004 Bugs: #48448 ID: 200405-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= There are multiple format string vulnerabilities in libneon which may allow a malicious WebDAV server to execute arbitrary code. Background ========= neon provides an HTTP and WebDAV client library. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/neon = 0.24.5 Description ========== There are multiple format string vulnerabilities in libneon which may allow a malicious WebDAV server to execute arbitrary code under the context of the process using libneon. Impact ===== An attacker may be able to execute arbitrary code under the context of the process using libneon. Workaround ========= A workaround is not currently known for this issue. All users are advised to upgrade to the latest version of the affected package. Resolution ========= Neon users should upgrade to version 0.24.5 or later: # emerge sync # emerge -pv "> =net-misc/neon-0.24.5" # emerge "> =net-misc/neon-0.24.5" References ========= [ 1 ] CVE https://www.cve.org/CVERecord?id=CVE-CAN-2004-0179 Availability =========== This GLSA and any updates to it areavailable for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200405-01 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
May 09, 2004
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!