-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Trustix Secure Linux Bugfix Advisory #2004-0046

Package name: kernel, samba, swup
Summary: Multiple bugfixes
Date: 2004-09-14
Affected versions: Tr

[ more ]  [ reply ]

Freaknet Death C is pride to present ya:
}----------------- (The ArpSucker) ----------------{

Hi folks,
Did you ever dreamed to become the net, to be a big, bad, black, black,
black hole?
Yep! I did.

This code was made the "12 Sept 2004".
It started to dawn and I, Tomak and Nirvana, aft

[ more ]  [ reply ]

On Mon, Sep 13, 2004 at 02:51:07PM +0800, newbug wrote:
> Dear Sean Davis,
>
> I think this is a bug in cdrecord,
> my reason is:
<snip>

Yes, now that I read your reply and the reply from Dustin, I agree, it is
an issue in cdrecord. I stand corrected. Sorry for the line noise.

-Sean

--
/~\ The A

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrakelinux Security Update Advisory
_______________________________________________________________________

Package name: samba
Advisory ID:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

@stake, Inc.
www.atstake.com

Security Advisory

Advisory Name: Pingtel Xpressa Denial of Service
Release Date: 09-13-2004
Device: Xpressa phone (Model PX

[ more ]  [ reply ]

> -----Original Message-----
> From: Jake Appelbaum [mailto:jacob (at) appelbaum (dot) net [email concealed]]
> Sent: Friday, September 10, 2004 10:42 AM
> To: Thomas C. Greene; bugtraq (at) securityfocus (dot) com [email concealed]
> Subject: Re: New Data Wipe Tools
>
> Magnetic force microscopy is a threat that is very real for
> many people.
>
> It

[ more ]  [ reply ]

*** rfdslabs security advisory ***

Title: QNX crrtrap possible race condition vulnerability [RLSA_04-2004]

Versions: QNX RTP 6.1 (possibly others)

Vendor: http://www.qnx.com

Date: Sep 13 2004

Author: Julio Cesar Fort <julio at rfdslabs com br>

1. Introduction

crr

[ more ]  [ reply ]

*** rfdslabs security advisory ***

Title: QNX crrtrap possible race condition vulnerability [RLSA_04-2004]

Versions: QNX RTP 6.1 (possibly others)

Vendor: http://www.qnx.com

Date: Sep 13 2004

Author: Julio Cesar Fort <julio at rfdslabs com br>

1. Introduction

crrt

[ more ]  [ reply ]

*** rfdslabs security advisory ***

Title: QNX ftp client format string bug [RLSA_03-2004]

Versions: QNX RTP 6.1 (possibly others)

Vendor: http://www.qnx.com

Date: 13 Sep 2004

Author: Julio Cesar Fort <julio at rfdslabs com br>

1. Introduction

"QNX Software System

[ more ]  [ reply ]

others will correct me if I'm wrong, but, I beleive one can tune this with
sysctl params, and lower the time limits such to minimise problems. But
also, issues like this are long known, and not limited to linux nor the
current stable kernel.

Thanks,

Ron DuFresne

On Sat, 11 Sep 2004, Wolfpaw - D

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

Zyxel P681 with ZyNOS S/W Version: Vt020225a | 2/25/2002 installed leaks
random portions of memory in ARP requests:

21:47:05.709295 arp who-has x.x.x.x tell x.x.x.x
0x0000 0001 0800 0604 0001 00a0 c526 3cc1 xxxx ................
0x0010

[ more ]  [ reply ]

Samba nmbd Invalid Length Denial of Service Vulnerability

iDEFENSE Security Advisory 09.13.04a

www.idefense.com/application/poi/display?id=138&type=vulnerabilities

September 13, 2004

I. BACKGROUND

Samba is a software suite that provides file and print services to

SMB/CIFS clients, such

[ more ]  [ reply ]

*** rfdslabs security advisory ***

Title: QNX Photon multiple buffer overflows [RLSA_02-2004]

Versions: QNX RTP 6.1 (possibly others)

Vendor: QNX Software Systems <http://www.qnx.com>

Date: 13 Sep 2004

Author: Julio Cesar Fort <julio at rfdslabs com br>

1. Introduction

QNX Ph

[ more ]  [ reply ]

after installing firefox many of the permissions are set to 777, allowing
anyone on the system to change the contents of the (executable) files.

this first occured in the 0.9 release (in the tar.gz release as well as in the
installer). the problem (or is it called a feature now?) still exists in

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

@stake, Inc.
www.atstake.com
Security Advisory

Advisory Name: Lexar JumpDrive Secure(tm) Password Extraction
Release Date: 09-13-2004
Application: JumpDrive Secu

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200409-16
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Subject: Samba 3.0.x Denial of Service Flaw

Summary: (i) A DoS bug in smbd may allow an
unauthenticated user to cause smbd to
spawn new processes each one entering
an infinite loop. After sending a sufficient
amount of packets it is possible t

[ more ]  [ reply ]

SIG^2 Vulnerability Research Advisory

Directory Traversal Vulnerability in TwinFTP Server allows overwriting

of files outside FTP directory

by Tan Chew Keong

Release Date: 12 Sept 2004

ADVISORY URL

http://www.security.org.sg/vuln/twinftp103r2.html

SUMMARY

TwinFTP S

[ more ]  [ reply ]

On Fri, Sep 10, 2004 at 01:30:17AM -0000, newbug Tseng wrote:
>
>
> #!/bin/bash
>
> echo "cdr-exp.sh -- CDRecord local exploit ( Tested on cdrecord-2.01-0.a27.2mdk + Mandrake10)"
> echo "Author : newbug [at] chroot.org"
> echo "IRC : irc.chroot.org #chroot"
> echo "Date :09.09.2004"

[ more ]  [ reply ]

On Sat, 11 Sep 2004 20:45:43 -0600
"Wolfpaw - Dale Corse" <admin (at) wolfpaw (dot) net [email concealed]> wrote:

> As for it being an application bug - it may be one in Mysql not
> closing the sockets, but it is a Kernel Bug that allows CLOSE_WAIT
> sockets to clog up the connection queues, and cause a DOS conditions
> on oth

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200409-15
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[ more ]  [ reply ]

Posible Inclusion File in Perl Desk

0000-0002 Adv-Nkxtox

[Date] 12/09/04

[Author] Nikyt0x nikyt0x[at]hotmail[dot]com

[Site] Http://nikyt0x.webcindario.com

[Information]

PerlDesk is a feature packed web based help desk and email management application designed

to streamline the operat

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : zlib
SUMMARY : Fix for denial of service vuln

[ more ]  [ reply ]

Dear Jérôme ATHIAS,

According to provided information and fix (without code analysis) it
looks like access to unallocated memory, not like buffer overflow. It's
just non-working feature of Apache and it unconditionally crashes on any
request in specified configuration. Probably it means you

[ more ]  [ reply ]

Hi David,

Hmm.. I was more looking for the correct kernel developer to send
it to, rather then just releasing exploit code into the wild, and
having it end up a zero day hack. It was not in any way my intention
to waste anyone's time. I will however, comply with your politely
stated request :)

As

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

OpenPKG Security Advisory The OpenPKG Project
http://www.openpkg.org/security.html http://www.openpkg.org
openpkg-security (at) openpkg (dot) org [email concealed]

[ more ]  [ reply ]

On Fri, Sep 10, 2004 at 10:17:05AM -0700, Thomas C. Greene wrote:
> Data hygiene is generally easier on *nix because there are fewer hiding
> places than on a Windows system, but there are no free wipe tools that i'm
> aware of. So I got busy.

Well, there's GNU shred, which is part of the GNU coreu

[ more ]  [ reply ]

Sec-Labs Team proudly presents:

Gadu-Gadu (all versions with image-send feature) Heap Overflow
by Lord YuP
12/09/2004

Severity: High / Critical - Remote Code Execution

Version affected: Probably all versions with image-send feature
Tested on ver. 6.0 build 149 (t

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : kde
SUMMARY : Fix for multiple security vulne

[ more ]  [ reply ]

Greetings,

My apologies if this is to the wrong place - it happens to be the
first kernel bug I have found (or what appears to be one), and I'm
not entirely sure how to properly inform the Linux community about
it.

Anyway - on to the bug :)
==========================
Severity: HIGH
Title: KERNEL

[ more ]  [ reply ]