Welcome to our website
To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.
Updated lv packages for Red Hat Linux
Posted by Philipp Esselbach on: 05/17/2003 09:48 AM [ Print | 0 comment(s) ]
Red Hat has released updated lv packages for Red Hat Linux
RHSA-2003:169-08: Updated lv packages fix vulnerability
Read more
RHSA-2003:169-08: Updated lv packages fix vulnerability
Updated lv packages fix vulnerability
Lv is a powerful file viewer similar to less. It can decode and encode multilingual streams through many coding systems, such as ISO-8859, ISO-2022, EUC, SJIS Big5, HZ, and Unicode.
A bug has been found in versions of lv that read a .lv file in the current directory. Local attackers can use this to place an .lv file in any directory to which they have write access. Any user who subsequently runs lv in that directory and uses the v (edit) command can be forced to execute an arbitrary program.
Users are advised to upgrade to these erratum packages, which contain a version of lv that is patched to read the .lv configuration file only in the user's home directory.
Lv is a powerful file viewer similar to less. It can decode and encode multilingual streams through many coding systems, such as ISO-8859, ISO-2022, EUC, SJIS Big5, HZ, and Unicode.
A bug has been found in versions of lv that read a .lv file in the current directory. Local attackers can use this to place an .lv file in any directory to which they have write access. Any user who subsequently runs lv in that directory and uses the v (edit) command can be forced to execute an arbitrary program.
Users are advised to upgrade to these erratum packages, which contain a version of lv that is patched to read the .lv configuration file only in the user's home directory.
Read more
