Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
87

Debian DSA 632-1 Low: Linpopup Arbitrary Code Execution Risk

Stephen Dranger discovered a buffer overflow in linpopup, an X11 port of winpopup, running over Samba, that could lead to the execution of arbitrary code when displaying a maliciously crafted message.. --------------------------------------------------------------------------Debian Security Advisory DSA 632-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze January 10th, 2005 http://www.debian.org/security/faq --------------------------------------------------------------------------Package : linpopup Vulnerability : buffer overflow Problem-Type : remote Debian-specific: no CVE ID : CAN-2004-1282 Debian Bug : 287044 Stephen Dranger discovered a buffer overflow in linpopup, an X11 port of winpopup, running over Samba, that could lead to the execution of arbitrary code when displaying a maliciously crafted message. For the stable distribution (woody) this problem has been fixed in version 1.2.0-2woody1. For the unstable distribution (sid) this problem has been fixed in version 1.2.0-7. We recommend that you upgrade your linpopup package. Upgrade Instructions --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody -------------------------------- Source archives: Size/MD5 checksum: 577 b5272d2427beb92f9572337c3907f7bf Size/MD5 checksum: 14771 346c0d8fc894eb9660cbc945f53d7a48 Size/MD5 checksum: 145628 26503ac44971e334cbbb0a79dd796d93 Alpha architecture: Size/MD5 checksum: 84980bd4cc7b95e42ae85891826fdd9345e5d ARM architecture: Size/MD5 checksum: 74870 b80b3706d1edb463b4d7ef0f56c87e79 Intel IA-32 architecture: Size/MD5 checksum: 74384 2f4379854819b565ccccd7b12a6c49de Intel IA-64 architecture: Size/MD5 checksum: 92484 04b4b1b3708af2b60c06e9f71f01713e HP Precision architecture: Size/MD5 checksum: 79440 7f77468ea23f65fc9a8ffdb8f46cdea9 Motorola 680x0 architecture: Size/MD5 checksum: 74278 d796fa11bf939e3fd5bcbe1f4e2a4d13 Big endian MIPS architecture: Size/MD5 checksum: 76782 55cfe5ccdd97d3cda45195adaf881149 Little endian MIPS architecture: Size/MD5 checksum: 75740 0437ce2cd5f7eac82c53d093d3705e3e PowerPC architecture: Size/MD5 checksum: 76628 141d3f2f5ea14033380407ba5f947f5e IBM S/390 architecture: Size/MD5 checksum: 76724 741b61e7ba6bbe691b717a7e426ed3e5 Sun Sparc architecture: Size/MD5 checksum: 76130 a316e43db286b9ae298481d0bbe6fd29 These files will probably be moved into the stable distribution on its next update. ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Enhance linpopup to address the buffer overflow vulnerabilities highlighted in Debian Security Notice DSA 632-1. Maintain security!. Linpopup Update, Debian Security Advisory, Buffer Overflow Fix, Remote Threat Mitigation. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jan 10, 2005 Low Debian
91

Gentoo: 200501-01 Normal: LinPopUp Buffer Overflow Candidates For Risk

LinPopUp contains a buffer overflow potentially allowing execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200501-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: LinPopUp: Buffer overflow in message reply Date: January 04, 2005 Bugs: #74705 ID: 200501-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= LinPopUp contains a buffer overflow potentially allowing execution of arbitrary code. Background ========= LinPopUp is a graphical application that acts as a frontend to Samba client messaging functions, allowing a Linux desktop to communicate with a Microsoft Windows computer that runs Winpopup. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-im/linpopup < 2.0.4-r1 > = 2.0.4-r1 Description ========== Stephen Dranger discovered that LinPopUp contains a buffer overflow in string.c, triggered when replying to a remote user message. Impact ===== A remote attacker could craft a malicious message that, when replied using LinPopUp, would exploit the buffer overflow. This would result in the execution of arbitrary code with the privileges of the user running LinPopUp. Workaround ========= There is no known workaround at this time. Resolution ========= All LinPopUp users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-im/linpopup-2.0.4-r1" References ========= [ 1 ] CAN-2004-1282 https://www.cve.org/CVERecord?id=CVE-CAN-2004-1282 [ 2 ]Stephen Dranger Advisory Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200501-01 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2004 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.0/ . The vulnerability in LinPopUp's memory allocation can enable malicious actors to run unauthorized commands. It's essential to update your software to protect your system from this risk.. LinPopUp, Buffer Overflow, Gentoo Security Update, Arbitrary Code Execution. . LinuxSecurity.com Team

Calendar%202 Jan 04, 2005 Gentoo
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here