Mandriva - The Community's Center for Security


The central voice for Linux and Open Source security news

Welcome!

Sign up!

EnGarde Community

Polls

What is the most important Linux security technology?

	SELinux
	grsecurity
	CIS Benchmark
	Bastille Linux
	iptables
	LIDS

Advisories

Community

Linux Events

Linux User Groups

Link to Us

Security Center

Book Reviews

Security Dictionary

Security Tips

SELinux

White Papers

Featured Blogs

All About Linux

DanWalsh LiveJournal

Securitydistro

Latest Newsletters

Linux Advisory Watch: May 17th, 2013

Linux Security Week: May 13th, 2013

LinuxSecurity Newsletters

RSS Feeds

Get the LinuxSecurity news you want faster with RSS

Mandriva

Find the information you need for your favorite open source distribution

To browse through our weekly Linux Advisory Watch newsletters, click here.

Mandrake: 'at' Heap corruption vulnerability

19 January 2002

This is caused due to a heap corruption that can be exploited under certain circumstances because the at command is installed setuid root.

Mandrake: 'stunnel' Format string vulnerability

17 January 2002

All versions of stunnel from 3.15 to 3.21c are vulnerable to format string bugs in the functions which implement smtp, pop, and nntp client negotiations.

Mandrake: 'sudo' Potential local root compromise

16 January 2002

Versions of sudo prior to 1.6.4 would not clear the environment beforesending an email notification about unauthorized sudo attempts, making itpossible for an attacker to supply parameters to the mail program.

Mandrake: 'bind' Insecure permissions vulnerability

09 January 2002

There are some insecure permissions on configuration files and executables with the bind 9.x packages shipped with Mandrake Linux 8.0 and 8.1.

Mandrake: 'mutt' Remote buffer overflow

08 January 2002

Joost Pol reported a remotely exploitable buffer overflow in the mutt email client.

Mandrake: 'libgtop' Remote format string vulnerability

20 December 2001

A remote format string vulnerability was found in the libgtop daemon by Laboratory intexxia. By sending a specially crafted format string to the server, a remote attacker could potentially execute arbitrary code on the remote system with the daemon's permissions.

Mandrake: 'kerberos' buffer overflow

18 December 2001

A buffer overflow exists in the telnet portion of Kerberos that could provide root access to local users.

<< Start < Prev 436 437 438 Next > End >>

Results 3053 - 3059 of 3265