Från Bugtraq november år 2002

• SuSE Security Announcement: lprng/html2ps (SuSE-SA:2002:040)
• [SECURITY] [DSA 186-1] New log2mail packages fix several vulnerabilities
• [SECURITY] [DSA 187-1] New Apache packages fix several vulnerabilities
• [Announce] AngeL v0.9.0
• SnortCenter 0.9.5 temp file naming problems...
• GLSA: MailTools
• [SECURITY] [DSA 189-1] New luxman packages fix local root exploit
• [CLA-2002:539] Conectiva Linux Security Announcement - ypserv
• [CLA-2002:541] Conectiva Linux Security Announcement - mod_ssl
• [CLA-2002:540] Conectiva Linux Security Announcement - heartbeat
• [CLA-2002:537] Conectiva Linux Security Announcement - tetex
• [CLA-2002:534] Conectiva Linux Security Announcement - krb5
• [CLA-2002:542] Conectiva Linux Security Announcement - gv/kghostview
• [CLA-2002:538] Conectiva Linux Security Announcement - tar/unzip
• [CLA-2002:535] Conectiva Linux Security Announcement - glibc
• iDEFENSE Security Advisory 11.06.02: Non-Explicit Path Vulnerability in LuxMan
• [CLA-2002:544] Conectiva Linux Security Announcement - linuxconf
• [SECURITY] [DSA-190-1] buffer overflow in Window Maker
• Remote pine Denial of Service
• [RHSA-2002:242-06] Updated kerberos packages available
• [SECURITY] [DSA 191-1] New squirrelmail packages fix cross site scripting bugs
• [RHSA-2002:197-09] Updated glibc packages fix vulnerabilities in resolver
• MDKSA-2002:075 - nss_ldap update
• [SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities
• MDKSA-2002:076 - perl-MailTools update
• [SECURITY] [DSA 192-1] New html2ps packages fix arbitrary code execution
• GLSA: kgpg
• [SECURITY] [DSA 191-2] New squirrelmail packages fix problem in options page
• Timing the Application of Security Patches for Optimal Uptime
• [SECURITY] [DSA 193-1] New klisa packages fix buffer overflow
• [RHSA-2002:213-06] New PHP packages fix vulnerability in mail function
• Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment (PXE) server denial-of-service attacks
• SuSE Security Announcement: perl-MailTools (SuSE-SA:2002:041)
• iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa
• GLSA: apache
• KDE Security Advisory: rlogin.protocol and telnet.protocol URL KIO Vulnerability
• [SECURITY] [DSA 194-1] New masqmail packages fix buffer overflows
• SuSE Security Announcement: KDE lanbrowser vulnerability (SuSE-SA:2002:042)
• Security Update: [CSSA-2002-042.0] Linux: libpng progressive image loading vulnerabilities and other buffer overflows
• SuSE Security Announcement: SuSE-SA:2002:043 (traceroute-nanog/nkitb)
• [SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities
• The Unix Auditor's Practical Handbook
• [ESA-20021114-029] BIND buffer overflow, DoS attacks.
• arp spoofing defence
• GLSA: kdelibs
• i386 Linux kernel DoS
• Security Update: [CSSA-2002-045.0] Linux: python insecure temporary files in os._execvpe
• [CLA-2002:545] Conectiva Linux Security Announcement - php4
• SuSE Security Announcement: Multiple vulnerabilities in BIND8 (SuSE-SA:2002:044)
• [CLA-2002:547] Conectiva Linux Security Announcement - syslog-ng
• GLSA: kdenetwork
• [CLA-2002:546] Conectiva Linux Security Announcement - bind
• MDKSA-2002:077 - bind update
• Unofficial statement re: tcpdump and libpcap
• [SECURITY] [DSA-196-1] New BIND packages fix several vulnerabilities
• Security Update: [CSSA-2002-046.0] Linux: buffer overflows and other security issues in squid
• Security Update: [CSSA-2002-047.0] Linux: KDE SSL and XSS vulnerabilities
• [RHSA-2002:262-07] New kernel fixes local denial of service issue
• [SECURITY] [DSA 197-1] New sqwebmail packages fix local information exposure
• [CLA-2002:549] Conectiva Linux Security Announcement - dhcpcd
• [SECURITY] [DSA 198-1] New nullmailer packages fix local denial of service
• Paketto Keiretsu 1.0
• TSLSA-2002-0077 - kernel
• [SECURITY] [DSA 199-1] New mhonarc packages fix cross site scripting
• Updated ypserv packages fix memory leak
• Security Update: [CSSA-2002-048.0] Linux: wwwoffled remote access vulnerability
• Security Update: [CSSA-2002-049.0] Linux: lynx CRLF injection vulnerability
• MDKSA-2002:079 - Updated kdelibs packages fix remote command execution vulnerabilites
• Zeroo Folder Traversal Vulnerability
• iDEFENSE Security Advisory 11.19.02c: Netscape Predictable Directory Structure Allows Theft of Preferences File
• MDKSA-2002:080 - Updated kdenetwork packages fix remote command execution vulnerabilites
• SuSE Security Announcement: samba (SuSE-SA:2002:045)
• GLSA: php
• GLSA: samba
• Security Update: [CSSA-2002-052.0] Linux: sendmail smrsh bypass vulnerabilities
• Opera 6.03/Linux crashes on HTTPS over Squid Proxy on a site
• GLSA: courier
• [RHSA-2002:266-05] New samba packages available to fix potential security vulnerability
• [CLA-2002:550] Conectiva Linux Security Announcement - samba
• [ESA-20021122-030] local kernel vulnerabilities
• [ESA-20021122-031] php upgrade, security fixes
• GLSA: gtetrinet
• [RHSA-2002:264-05] New kernel 2.2 packages fix local denial of service issue
• [LSD] Java and JVM security vulnerabilities
• SuSE Security Announcement: pine (SuSE-SA:2002:046)
• TSLSA-2002-0080 - samba
• MDKSA-2002:082 - Updated python packages fix local arbitrary code execution vulnerability
• MDKSA-2002:081 - Updated samba packages fix potential root compromise
• [Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8]
• [ESA-20021127-032] 'pine' version upgrade, security fixes.
• MDKSA-2002:083 - Updated sendmail packages fix smrsh insecurities
• Exploit for traceroute-nanog overflow

Upp en nivå