Debian - The Community's Center for Security


The central voice for Linux and Open Source security news

Welcome!

Sign up!

What is the most important Linux security technology?

Advisories

Community

Link to Us

Security Center

White Papers

LinuxSecurity Newsletters

Get the LinuxSecurity news you want faster with RSS

Debian

Find the information you need for your favorite open source distribution

To browse through our weekly Linux Advisory Watch newsletters, click here.

Debian: 'gnupg' multiple vulnerabilities

18 June 2001

Posted by LinuxSecurity.com Team
A printf format string attack and "web of trust" pollution vulnerabilities have been fixed.

Debian: 'xinetd' multiple vulnerabilities

18 June 2001

Posted by LinuxSecurity.com Team
A buffer overflow condition and insecure umask mode vulnerabilities have been fixed.

Debian: 'man-db' symlink attack vulnerability

12 June 2001

Posted by LinuxSecurity.com Team
Luki R. reported a bug in man-db: it did handle nested calls ofdrop_effective_privs() and regain_effective_privs() correctly whichwould cause it to regain privileges to early. This could be abusedto make man create files as user man.

Debian: 'exim' remote format string attack

12 June 2001

Posted by LinuxSecurity.com Team
Megyer Laszlo found a printf format bug in the exim mail transferagent. The code that checks the header syntax of an email logsan error without protecting itself against printf format attacks.

Debian: 'samba' vulnerability

09 May 2001

Posted by LinuxSecurity.com Team
Marc Jacobsen from HP discovered that the security fixes from samba 2.0.8 did not fully fix the /tmp symlink attack problem. The samba team released version 2.0.9 to fix that, and those fixes have been added to version 2.0.7-3.3 of the Debian samba packages.