A security hole was discovered in the GNU make package version 3.77-44 distributed with SuSE 6.1 and 6.3. If Makefile contents are fed in via stdin, files will be created in /tmp without checking if there is a symbolic link with the same name. Implications are command execution as the user running make. Other distributions are also affected. SuSE security site here.
159fb747bd37acb0d957f25b84613db2A security hole was discovered in the util package (mount and umount commands) installed by default on SuSE and other flavors of linux. Local root compromise possible. SuSE security site here.
1edc10bfec79008dd8089f16d3a05dfdPatch for linux kernel 2.2.14 to discard packets that many OS detection tools use to query the TCP/IP stack.
49cf985220d9f9f7914dd7f6a1c3df3fKppp 1.6.14 has a vulnerability that allows a local user to display the saved PPP password.
e17d29c409d507d18d9e77638a638b55InetServ 3.0 remote DoS exploit.
64b48c833b81de40f5d241c6ab91ab1cWindows 2000 Magazene Security Digest - New vulnerabilities include RDISK Race Condition: Update, Bypass surfControl URL Blocking, WWWThreads Elevates Privileges, Web Server Scripting Issues, Microsoft Java Exposes Files, and Windows NT Recycle Bin Goes Unchecked. Also contains articles on serious DoS attacks, IIS Administrator, FBI and CERT Warn Users Against Web-Based Scripting, and ZoneAlarm 2.0.
8c4c11fd4edc5df3dfe9daddbdcb405fISS Security Alert - Denial of Service Attack using the TFN2K and Stacheldraht programs. These attacks are more powerful than any previous denial of service attack observed on the Internet.
5a1cfdca1aef2510fff4e9513f5f6375Bypassing authentication on Axis 700 Network Scanner - By modifying an URL, outsiders can access administrator URLs without entering username and password. Tested on Axis 700 Network Scanner Server version 1.12.
f70633be334913857b2a518fe0b8fb64The default configuration of SCO OpenServer 5.0.5 allows local users read/write access to SNMPD via a default writable community string. This configuration has been verified on SCO OpenServer 5.0.5 and may be present in earlier versions.
65621fa6a56b8455d0b5df0e18f51ef0There exists a vulnerability in the password checking routines in the latest versions of the MySQL server, that allows any user on a host that is allowed to connect to the server, to skip password authentication, and access databases. All versions of MySQL up to 3.22.26a are vulnerable.
bccc06af6a8f1bc9c5bbd21a11a9dfe1
© 2019 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed