There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
Tag Cloud
access acer asus bios bsod computer crash desktop dns driver drivers error ethernet excel freeze gaming hard drive hardware hdmi internet laptop lcd malware memory monitor motherboard netgear network printer problem ram registry router slow software sound toshiba trojan usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless xbox
Search
Search for:
Tech Support Guy Forums > Operating Systems > Linux and Unix >
Linux Security Updates: Feb

Reply  
Thread Tools
eddie5659's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 25,163 posts.
 
Join Date: Mar 2001
Location: Bradford, England
26-Feb-2004, 06:18 PM #1
Exclamation Linux Security Updates: Feb
Hiya

Thought I'd start these again. Just a few for now, but March will be the real start

mtools mformat utility creates files with insecure permissions

Description:

mtools is a freely available set of utilities that allows users to access MS-DOS files for Unix and Linux-based platforms. The mformat utility in mtools versions prior to 3.9.9 creates any file with Read/Execute permissions, if the utility is installed suid root. A local attacker could use this vulnerability to view files and obtain sensitive information.

Platforms Affected:

David Niemi and Alain Knaff mtools prior to 3.9.9
MandrakeSoft, Inc. Mandrake Linux 9.2
Remedy:

Upgrade to the latest version of mtools (3.9.9 or later), available from the mtools Web site. See References.

For Mandrake Linux 9.2:
Upgrade to the latest mtools package (3.9.9-2.1.92mdk or later), as listed in MandrakeSoft Security Advisory MDKSA-2004:016 : mtools. See References.

For other distributions:
Contact your vendor for upgrade or patch information.

Consequences:

Obtain Information

http://www.mandrakesecure.net/en/adv...MDKSA-2004:016

Regards

eddie
__________________
Just go with the flow, like a twig on the shoulders of a mighty stream

Proud Member of ASAP, Alliance of Security Analysis Professionals
eddie5659's Avatar
Computer Specs
Moderator & Malware Removal Specialist with 25,163 posts.
 
Join Date: Mar 2001
Location: Bradford, England
28-Feb-2004, 02:11 PM #2
Hiya

Calife long password buffer overflow

Calife is freely available program that allows certain users, usually system administrators, to obtain super user privileges for Linux-based operating systems. Calife versions 2.8.4 and 2.8.5 are vulnerable to a buffer overflow, caused by improper bounds checking. By supplying a long password, a local attacker could overflow a buffer and cause a segmentation fault or possibly execute arbitrary code on the system.

Platforms Affected:

Calife Calife 2.8.4
Calife Calife 2.8.5
kernel.org Linux Any version
Remedy:

Upgrade to the latest version of Calife (2.8.6 or later), when it becomes available from the Calife Web page. See References.

Consequences:

Gain Privileges

http://xforce.iss.net/xforce/xfdb/15335

Regards

eddie
__________________
Just go with the flow, like a twig on the shoulders of a mighty stream

Proud Member of ASAP, Alliance of Security Analysis Professionals
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 08:19 AM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.