-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 234-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
January 22nd, 2003

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux
printer-drivers Package
http://www.idefense.com/advisory/01.21.03.txt
January 21, 2003

I. BACKGROUND

MandrakeSoft Inc.'s Mandrake Linux includes the printer-drivers package in
mos

[ more ]  [ reply ]

-- Overview

Through the exploitation of a SQL injection vulnerability it is possible for
an unauthenticated user to query the Blackboard user directory and:

- Enumerate users with a given password.
- Extract the MD5 password of any given user.

Blackboard Learning System 5.x, level 1 and 2

[ more ]  [ reply ]

---------------------------------------------------------------------
Red Hat, Inc. Red Hat Security Advisory

Synopsis: Updated python packages fix predictable temporary file
Advisory ID: RHSA-2002:202-25
Issue date: 2003-01-21
Updated on: 2003-01-21

[ more ]  [ reply ]

To: bugtraq (at) securityfocus (dot) com [email concealed] announce (at) lists.caldera (dot) com [email concealed] security-alerts (at) linuxsecurity (dot) com [email concealed] full-disclosure (at) lists.netsys (dot) com [email concealed]

________________________________________________________________________
______

SCO Security Advisory

Subject: Linux: canna buffer overflow and denial of service
Advisor

[ more ]  [ reply ]

Version: All

Script: edit.php

vendor: itop10.net

Type: Code Injection/Execution Vulnerability

------------------------------------------------------------------------
---

Another critical vulnerability has been found by the CyberArmy Security

Research Team that effects php topsites. Basicall

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200301-12
- - --------------------------------------------------------------------

PACKAGE : cvs
SUMMARY : arbitrary code execution
DATE : 20

[ more ]  [ reply ]

---------------------------------------------------------------------
Red Hat, Inc. Red Hat Security Advisory

Synopsis: Updated CVS packages available
Advisory ID: RHSA-2003:012-07
Issue date: 2003-01-20
Updated on: 2003-01-20
Product: Red H

[ more ]  [ reply ]

Todd (and lists),

You wrote:

>
> This is not completely correct, and I wanted to clarify how an attack
> against a domain-member's EFS encrypted files can work. The threat
> model is this:
>

It is important to distinguish between a weakness in EFS (there is none,
as described here) and the ris

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______
SGI Security Advisory

Title : IRIX ToolTalk RPC Server Format String Vulnerability update
Number : 20021102-02-P
Date : January 21, 2003
Reference: C

[ more ]  [ reply ]

Informations :
°°°°°°°°°°°°°°
Website : http://phpmypub.free.fr
Version : 1.2.0
Problem : Admin access

PHP Code/Location :
°°°°°°°°°°°°°°°°°°°
admin/index.php :
------------------------------------------------------------------------

[...]
$auth = $HTTP_COOKIE_VARS["adminpub"];
if (!$auth)
{
if ($

[ more ]  [ reply ]

On Fri, Jan 17, 2003 at 06:25:52PM +0100, Peter Turczak wrote:
> Well this correct as long as you don't use the Sun fcal and gbit card. This

Strange, all gbic atapters I know do automatic padding

> one does again not pad with a constant value, so i guess it is vunerable.
>
> 0000 00 0a 27 7d d2

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200301-10
- - --------------------------------------------------------------------

PACKAGE : dhcp
SUMMARY : buffer overflow
DATE    : 2003-01-17

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

Mandrake Linux Security Update Advisory
________________________________________________________________________

Package name: dhcp
Advisory ID:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200301-11
- - --------------------------------------------------------------------

PACKAGE : kde-2.2.x
SUMMARY : multiple vulnerabilites in KDE

[ more ]  [ reply ]

Hi,
i discovered a bug in the dhcrelay causing it to send a continuing packet
storm towards the configured dhcp server(s) in case of a malicious bootp
packet. I have seen this on Linux Kernel 2.2 and 2.4 with the isc dhcp
3.0rc9 relay (I havent tested rc10 but the diff shows no obvious fix).

In ca

[ more ]  [ reply ]

---------------------------------------------------------------------
Red Hat, Inc. Red Hat Security Advisory

Synopsis: Updated dhcp packages fix security vulnerabilities
Advisory ID: RHSA-2003:011-07
Issue date: 2003-01-16
Updated on: 2003-01-16
Prod

[ more ]  [ reply ]

[This isn't exactly new, but it does come up now and then, so I
thought it might be useful to summarize it here.]

Recently, I stumbled upon a page on Microsoft's website,
<URL:http://www.microsoft.com/technet/treeview/default.asp?url=/technet/
security/news/efs.asp>
which talks about possible attac

[ more ]  [ reply ]

Gabber 0.8.7 leaks presence information without user authorization
Greg Troxel <gdt (at) ir.bbn (dot) com [email concealed]>

DESCRIPTION

Gabber 0.8.7 sends a presence message to the Jabber ID
956878967 (at) update.jabber (dot) org [email concealed] at login and logout time.
This is a privacy violation: that a user even exists should only be
disc

[ more ]  [ reply ]

---------------------------------------------------------------------
Red Hat, Inc. Red Hat Security Advisory

Synopsis: Updated vim packages fix modeline vulnerability
Advisory ID: RHSA-2002:297-17
Issue date: 2003-01-16
Updated on: 2003-01-15
Product

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

I. BACKGROUND

PHP-Nuke is a popular Web portal system.

Project homepage : http://www.phpnuke.org

II. DESCRIPTION

Remote attacker could transfer to server his own file or copy
arbitrary file from system to accessible directory. The result
of such acts could be

[ more ]  [ reply ]

---------------------------------------------------------------------
Red Hat, Inc. Red Hat Security Advisory

Synopsis: Updated MySQL packages fix various security issues
Advisory ID: RHSA-2002:288-22
Issue date: 2003-01-15
Updated on: 2003-01-15
Prod

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200301-9
- - --------------------------------------------------------------------

PACKAGE : fnord
SUMMARY : buffer overrun
DATE    : 2003-01-17

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

Mandrake Linux Security Update Advisory
________________________________________________________________________

Package name: krb5
Advisory ID:

[ more ]  [ reply ]

---------------------------------------------------------------------
Red Hat, Inc. Red Hat Security Advisory

Synopsis: Updated libpng packages fix buffer overflow
Advisory ID: RHSA-2003:006-06
Issue date: 2003-01-13
Updated on: 2003-01-09
Product:

[ more ]  [ reply ]

Multiple PHP Topsites Vulnerabities found

PHP TopSites is a PHP/MySQL-based customizable TopList script. Main

features include: Easy configuration config file; MySQL database backend;

unlimited categories, Site rating on incoming votes; Special Rating from

Webmaster; anti-cheating gatewa

[ more ]  [ reply ]