Red Hat Essential and Critical Security Patch Updates

Red Hat: tcpdump Denial of service vulnerability

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Crafted remote packets can result in a denial of service, or possibly execute arbitrary code as the 'pcap' user.

LinuxSecurity.com Team
Jan 14, 2004

Red Hat: kdepim Buffer overflow vulnerability

Updated kdepim packages are now available that fix a local buffer overflowvulnerability.

LinuxSecurity.com Team
Jan 14, 2004

Red Hat: cvs Chroot breakout vulnerability

cvs can attempt to create files and directories in the root file system

LinuxSecurity.com Team
Jan 12, 2004

Red Hat: etherial Denial of Service vulnerabilities

By exploiting these two issues it may be possible to make Ethereal crash by injecting an intentionally malformed packet

LinuxSecurity.com Team
Jan 08, 2004

Red Hat: kernel Privilege escalation vulnerability RHSA-2003:417-01

Updated kernel packages are now available that fix a security vulnerability which may allow local users to gain root privileges.

LinuxSecurity.com Team
Jan 05, 2004

Red Hat: apache Creatable buffer overflow vulnerability

A carefully-crafted configuration file can cause an exploitable bufferoverflow and would allow the attacker to execute arbitrary code in thecontext of the server (in default configurations as the 'apache' user).

LinuxSecurity.com Team
Dec 19, 2003

Red Hat: apache Multiple (minor) vulnerabilities

Updated httpd packages that fix two minor security issues in the Apache Webserver are now available for Red Hat Linux 8.0 and 9.

LinuxSecurity.com Team
Dec 16, 2003

Red Hat: lftp Buffer overflow vulnerability

An attacker could create a carefully crafteddirectory on a website such that, if a user connects to that directoryusing the lftp client and subsequently issues a 'ls' or 'rels' command, theattacker could execute arbitrary code on the users machine.

LinuxSecurity.com Team
Dec 16, 2003

Red Hat: GnuPG Signing key vulnerability

Phong Nguyen identified a severe bug in the way GnuPG creates and usesElGamal keys, when those keys are used both to sign and encrypt data. Thisvulnerability can be used to trivially recover the private key.

LinuxSecurity.com Team
Dec 11, 2003

Red Hat: rsync heap overflow

A heap overflow bug exists in rsync versions prior to 2.5.7. On machineswhere the rsync server has been enabled, a remote attacker could use thisflaw to execute arbitrary code as an unprivileged user.

LinuxSecurity.com Team
Dec 04, 2003

RedHat: Net-SNMP Unauthorized access vulnerability

Updated Net-SNMP packages are available to correct a security vulnerabilityand other bugs.

LinuxSecurity.com Team
Dec 02, 2003

RedHat: kernel Privilege escalation vulnerability

Updated kernel packages are now available that fix a security vulnerabilityleading to a possible privilege escalation.

LinuxSecurity.com Team
Dec 01, 2003

Redhat: XFree86 Multiple vulnerabilities RHSA-2003:286-01

Multiple integer overflows in the transfer and enumeration of fontlibraries in XFree86 allow local or remote attackers to cause a denial ofservice or execute arbitrary code via heap-based and stack-based bufferoverflow attacks.

LinuxSecurity.com Team
Nov 25, 2003

RedHat: stunnel Signal-handling vulnerability

Updated stunnel packages are now available for Red Hat Linux 7.1, 7.2, 7.3,and 8.0 systems. These updates address problems stemming from improper useof non-reentrant functions in signal handlers.