Mandrake usermode utilities unauthorized access updated since 19.07.2000
Published:		13.03.2003
Source:		BUGTRAQ
SecurityVulns ID:		370
Type:		local
Level:		5/10
Description:		Any user can halt/reboot system and obtain root shell from console.

Affected:		MANDRAKE : Mandrake Linux 7.1
		MANDRAKE : Mandrake Linux 9.0
		MANDRAKE : Mandrake Linux 8.2
		MANDRAKE : Mandrake Linux 8.1

Original document		MANDRAKE, MDKSA-2003:031 - Updated usermode packages remove insecure shutdown command (13.03.2003)
		Vincent Danen, MDKSA-2000:020 usermode update (19.07.2000)

Discuss:

Read or add your comments to this news (0 comments)

Multiple LDAP servers vulnerabilities updated since 17.07.2001
Published:		13.03.2003
Source:		BUGTRAQ
SecurityVulns ID:		1333
Type:		remote
Level:		7/10
Description:		DoS, unauthorized access.

Affected:		MICROSOFT : Exchange 5.5
		LOTUS : Domino 5.0
		ORACLE : Oracle 8
		IPLANET : Directory Server 5.0
		IBM : SecureWay
		TEAMWARE : Teamware Office 5.3
		QUALCOMM : Eudora WorldMail 2
		NAI : PGP Keyserver 7.0
		OPENLDAP : OpenLDAP 2.0
		LOTUS : Notes 5.0
		LOTUS : Domino 6.0
		LOTUS : Notes 6.0

Original document		Rapid 7 Security Advisories, R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression (13.03.2003)
		CERT, Advisory CA-2001-18 (17.07.2001)

Discuss:

Read or add your comments to this news (0 comments)

lprm buffer overflow updated since 06.03.2003
Published:		13.03.2003
Source:		BUGTRAQ
SecurityVulns ID:		2636
Type:		local
Level:		6/10
Description:		A bounds check that does its checking too late to be effective.

Affected:		OPENBSD : OpenBSD 3.1
		OPENBSD : OpenBSD 3.2

Original document		SUSE, SuSE Security Announcement: lprold (SuSE-SA:2003:0014) (13.03.2003)
		Todd C. Miller, potential buffer overflow in lprm (06.03.2003)

Files:		OpenBSD <= 3.1 lprm(1) local root exploit
Discuss:		Read or add your comments to this news (0 comments)

PostgreSQL DoS
Published:		13.03.2003
Source:		BUGTRAQ
SecurityVulns ID:		2653
Type:		remote
Level:		5/10
Description:		User-supplied value is used for memory allocation.

Affected:

POSTGRESQL : postgresql 7.2

Original document

Sir Mordred The Traitor, @(#)Mordred Labs advisory - Remote DoS in PostgreSQL <= 7.2.2 (13.03.2003)

Discuss:

Read or add your comments to this news (0 comments)

Online tax programs information leak updated since 13.03.2003
Published:		27.03.2003
Source:		BUGTRAQ
SecurityVulns ID:		2654
Type:		remote
Level:		5/10

Affected:		H&R : Block Tax Cut
		INTUIT : TurboTax
		EXPRESSINFO : MyTaxexpress 2003

Original document		Nathan Wosnack, Security Advisory - MyTaxexpress 2003 (27.03.2003)
		Mike Kristovich, PivX Advisory MK002A Intuit TurboTax Information Disclosure Vulnerability (13.03.2003)
		Mike Kristovich, PivX Advisory MK002B H&R Block TaxCut Information Disclosure Vulnerability (13.03.2003)

Discuss:

Read or add your comments to this news (0 comments)

Lotus Notes buffer overflows updated since 13.03.2003
Published:		27.03.2003
Source:		BUGTRAQ
SecurityVulns ID:		2652
Type:		remote
Level:		8/10
Description:		Heap overflow during authentication process. Buffer overflow on oversized HTTP server reply Status: header in Web Retriever.

Affected:		LOTUS : Domino 5.0
		LOTUS : Notes 5.0
		LOTUS : Domino 6.0
		LOTUS : Notes 6.0

Original document		CERT, CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino (27.03.2003)
		Rapid 7 Security Advisories, R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow (13.03.2003)
		Rapid 7 Security Advisories, R7-0010: Buffer Overflow in Lotus Notes Protocol Authentication (13.03.2003)

Discuss:

Read or add your comments to this news (0 comments)