Multiple bugs in CDE ToolTalk updated since 11.07.2002
Published:		13.08.2002
Source:		CERT
SecurityVulns ID:		2144
Type:		remote
Level:		7/10
Description:		Incomplete input validation in different remote calls.

Affected:		IBM : AIX 4.3
		SUN : Solaris 2.6
		HP : HP-UX 11.00
		SUN : Solaris 8
		HP : HP-UX 10.20
		SUN : Solaris 7
		SUN : Solaris 2.5
		SCO : UnixWare 7.1
		IBM : AIX 5.1
		HP : HP-UX 11.11
		HP : HP-UX 10.10
		SCO : Open UNIX 8.0
		SUN : Solaris 9
		XIG : deXtop CDE 2.1

Original document		CERT, Advisory CA-2002-26 Buffer Overflow in CDE ToolTalk (13.08.2002)
		Entercept Ricochet Team, ENTERCEPT RICOCHET ADVISORY: Multi-Vendor CDE ToolTalk Database Server Remote Buffer Overflow Vulnerability (12.08.2002)
		CORESDI, [CORE-20020528] Multiple vulnerabilities in ToolTalk Database server (11.07.2002)
		CERT, Advisory CA-2002-20 Multiple Vulnerabilities in CDE ToolTalk (11.07.2002)

Discuss:

Read or add your comments to this news (0 comments)

Signed/unsigned conversion bug in OpenBSD select() call
Published:		13.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2225
Type:		local
Level:		7/10
Description:		By passing negative argument to select() function it's possible to overwrite the fragment of kernel memory.

Original document

OPENBSD, OpenBSD Security Advisory: Select Boundary Condition (13.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in i4l
Published:		13.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2226
Type:		local
Level:		5/10
Description:		Buffer overflow in ipppd.

Affected:

I4L : i4l 2002

Original document

SUSE, SuSE Security Announcement: i4l (SuSE-SA:2002:030) (13.08.2002)

Discuss:

Read or add your comments to this news (0 comments)