Linux Compatible - Security (Page 11)

Snort update for Gentoo

Security 10943 Published 2003-03-06 22:09 by Philipp Esselbach 0

A new security update for Gentoo Linux has been released

PACKAGE : snort

Remote attackers may exploit the buffer overflow condition to run arbitrary code on a Snort sensor with the privileges of the Snort IDS process, which typically runs as the superuser. The vulnerable preprocessor is enabled by default. It is not necessary to establish an actual connection to a RPC portmapper service to exploit this vulnerability.

Read more

OpenSSL/IM Updates for Red Hat

Security 10943 Published 2003-03-06 22:05 by Philipp Esselbach 0

Red Hat has released the following two security updates:

Updated im packages fix insecure handling of temporary files

Internet Message (IM) is a series of user interface commands and backend Perl5 libraries that integrate email and the NetNews user interface. They are designed to be used from both the Mew mail reader for Emacs and the command line.

Read more

Updated OpenSSL packages fix timing attack

OpenSSL is a commercial-grade, full-featured, and open source toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library.

Read more

Sendmail Update for Red Hat 8.1 Beta 3

Security 10943 Published 2003-03-06 21:42 by 0

Chris Chabot has released an unofficial Sendmail update for Red Hat Linux 8.1 Beta 3 (Phoebe)

tcpdump Update for Gentoo

Security 10943 Published 2003-03-05 23:27 by Philipp Esselbach 0

A new security update for Gentoo Linux is available

PACKAGE : tcpdump

A vulnerability exists in the parsing of ISAKMP packets (UDP port 500) that allows an attacker to force TCPDUMP into an infinite loop upon receipt of a specially crafted packet.

Read more

Internet vulnerabilities caught in BIND

Security 10943 Published 2003-03-05 22:23 by Philipp Esselbach 0

Confusion is rife about potential vulnerabilities in BIND, the most commonly used domain name server on the Internet, and experts are calling on the makers of the software to clarify the issue.

Read more

Updated squirrelmail packages for Red Hat 8.0

Security 10943 Published 2003-03-05 14:07 by Philipp Esselbach 0

An update squirrelmail package for Red Hat Linux 8.0 has been released

Hackers' code exploits Sendmail flaw

Security 10943 Published 2003-03-05 12:20 by Philipp Esselbach 0

A group of four Polish hackers published code to an open security mailing list on Tuesday that can take advantage of a major vulnerability in the Sendmail mail server.

Read more

Sendmail Update for SoL Linux

Security 10943 Published 2003-03-04 21:48 by Philipp Esselbach 0

To install the Sendmail update under SoL - Server optimized Linux:

wget http://update.sol-linux.com/SoLrus
sh SoLrus

Sendmail Update for Debian

Security 10943 Published 2003-03-04 20:16 by Philipp Esselbach 0

An update Sendmail package is now available for Debian GNU/Linux

Sendmail Update for Gentoo Linux

Security 10943 Published 2003-03-04 20:11 by Philipp Esselbach 0

Another Sendmail update, this time for Gentoo Linux

Sendmail Update for SuSE

Security 10943 Published 2003-03-04 20:09 by Philipp Esselbach 0

A Sendmail update for SuSE Linux has been released

Sendmail Update for RaQ3/4/XTR/550

Security 10943 Published 2003-03-04 20:07 by 0

Solarspeed has released a Sendmail updates for RaQ 3/4/XTR/550 and Qube 3

Sendmail flaw tests Homeland Security

Security 10943 Published 2003-03-04 12:00 by Philipp Esselbach 0

A critical flaw in Sendmail, the Internet's most popular e-mail server, has become the first test for the newly minted Department of Homeland Security and its cyberdefense arm.

Read more

Sendmail Update for Ensim 3.1

Security 10943 Published 2003-03-04 00:31 by Philipp Esselbach 0

WEBpplance.info has published an inofficial sendmail update for Ensim WEBpplance 3.1

Sendmail Update for RaQ4

Security 10943 Published 2003-03-04 00:10 by Philipp Esselbach 0

PkgMaster has released a Sendmail update for Cobalt RaQ4 servers.

Sendmail/tcpdump Update for Mandrake

Security 10943 Published 2003-03-03 21:57 by Philipp Esselbach 0

MandrakeSoft has released two new updates for Mandrake Linux:

MDKSA-2003:028 : sendmail

mhc/tcpdump Updates for Debian

Security 10943 Published 2003-02-28 21:21 by Philipp Esselbach 0

Two security patches for Debian GNU/Linux has been released:

DSA-255-1 tcpdump -- infinite loop

Andrew Griffiths and iDEFENSE Labs discovered a problem in tcpdump, a powerful tool for network monitoring and data acquisition. An attacker is able to send a specially crafted network packet which causes tcpdump to enter an infinite loop.

In addition to the above problem the tcpdump developers discovered a potential infinite loop when parsing malformed BGP packets. They also discovered a buffer overflow that can be exploited with certain malformed NFS packets.

For the stable distribution (woody) these problems have been fixed in version 3.6.2-2.3.

For the old stable distribution (potato) does not seem to be affected by this problem.

For the unstable distribution (sid) these problems have been fixed in version 3.7.1-1.2.

Read more

DSA-256-1 mhc -- insecure temporary file

WEBppliance 3.1.6 LS for Linux

Security 10943 Published 2003-02-28 19:10 by Philipp Esselbach 0

Ensim has released WEBppliance 3.1.6 LS for Linux

Mandrake Secure Updates

Security 10943 Published 2003-02-28 12:32 by Philipp Esselbach 0

MandrakeSoft has released the following security updates for Mandrake Linux:

MDKSA-2003:026 : shadow-utils

Traceroute-nanog Update for Debian

Security 10943 Published 2003-02-27 23:50 by Philipp Esselbach 0

A new security update for Debian GNU/Linux is available:

DSA-254-1 traceroute-nanog -- buffer overflow

A vulnerability has been discovered in NANOG traceroute, an enhanced version of the Van Jacobson/BSD traceroute program. A buffer overflow occurs in the 'get_origin()' function. Due to insufficient bounds checking performed by the whois parser, it may be possible to corrupt memory on the system stack. This vulnerability can be exploited by a remote attacker to gain root privileges on a target host. Though, most probably not in Debian.

Read more