|
Find the information you need for your favorite open source distribution
 To browse through our weekly Linux Advisory Watch newsletters, click here.
|
|
|
Posted by Benjamin D. Thomas
|
|
Kalle Olavi Niemitalo discovered that if elinks makes a POST request
to an HTTPS URL through a proxy, information may be sent in clear-text
between elinks and the proxy. Attackers with access to the network
could steal sensitive information (such as passwords).
|
|
|
Posted by Benjamin D. Thomas
|
|
Evan Teran discovered that the Linux kernel ptrace routines did not
correctly handle certain requests robustly. Local attackers could exploit
this to crash the system, causing a denial of service. (CVE-2007-3731)
|
|
|
Posted by Benjamin D. Thomas
|
|
It was discovered that KDM would allow logins without password checks
under certain circumstances. If autologin was configured, and "shutdown
with password" enabled, a local user could exploit the problem and gain
root privileges.
|
|
|
Posted by Benjamin D. Thomas
|
|
Paul Martin discovered that xfs_fsr creates a temporary directory
with insecure permissions. This allows a local attacker to exploit a
race condition in xfs_fsr to read or overwrite arbitrary files on xfs
filesystems.
|
|
|
Posted by Benjamin D. Thomas
|
|
It was discovered that t1lib does not properly perform bounds checking
which can result in a buffer overflow vulnerability. An attacker could
send specially crafted input to applications linked against t1lib which
could result in a DoS or arbitrary code execution.
|
|
|
Posted by Benjamin D. Thomas
|
|
Aaron Plattner discovered that the Composite extension did not correctly
calculate the size of buffers when copying between different bit depths.
An authenticated user could exploit this to execute arbitrary code with
root privileges.
|
|
|
Posted by Benjamin D. Thomas
|
|
Dirk Mueller discovered that UTF8 strings could be made to cause a small
buffer overflow. A remote attacker could exploit this by sending specially
crafted strings to applications that use the Qt3 library for UTF8 processing,
potentially leading to arbitrary code execution with user privileges, or a
denial of service.
|
|
|
<< Start < Prev 163 164 165 Next > End >>
|
| Results 1149 - 1155 of 1354 |
