XChat buffer overflow
Published:		20.04.2004
Source:		BUGTRAQ
SecurityVulns ID:		3623
Type:		client
Level:		5/10
Description:		Buffer overflow in SOCKSv5 client code.

Affected:		XCHAT : xchat 1.8
		XCHAT : xchat 2.0

Original document

GENTOO, [ GLSA 200404-15 ] XChat 2.0.x SOCKS5 Vulnerability (20.04.2004)

Discuss:

Read or add your comments to this news (0 comments)

linux kernel ip_setsockopt integer overflow
Published:		20.04.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3624
Type:		local
Level:		8/10
Description:		Integer overflow on MCAST_MSFILTER option processing.

Affected:		LINUX : kernel 2.4
		LINUX : kernel 2.6

Original document

Wojciech Purczynski, [Full-Disclosure] Linux kernel setsockopt MCAST_MSFILTER integer overflow (20.04.2004)

Files:		Linux kernel setsockopt MCAST_MSFILTER integer overflow proof of concept code
Discuss:		Read or add your comments to this news (0 comments)

Multiple utempter bugs
Published:		20.04.2004
Source:		BUGTRAQ
SecurityVulns ID:		3625
Type:		remote
Level:		5/10
Description:		buffer overflows, directory traversal.

Affected:

UTEMPTER : utempter 0.5

Original document

MANDRAKE, MDKSA-2004:031 - Updated utempter packages fix several vulnerabilities (20.04.2004)

Discuss:

Read or add your comments to this news (0 comments)

ssmtp symbolic links problem
Published:		20.04.2004
Source:		BUGTRAQ
SecurityVulns ID:		3626
Type:		local
Level:		5/10
Description:		Log file is created in /tmp without checking for symlinks.

Affected:

SSMTP : ssmtp 2.50

Original document

priestmaster_(at)_sms.at, ssmtp insecure file creation (20.04.2004)

Discuss:

Read or add your comments to this news (0 comments)

Solaris NIS unauthorized passwords access
Published:		20.04.2004
Source:		BUGTRAQ
SecurityVulns ID:		3627
Type:		local
Level:		6/10
Description:		After installing 113579-03 patch any user can access secure NIS maps, for example passwd.adjunct.byname.

Affected:

SUN : Solaris 9

Original document

Chris Thompson, Solaris 9 patch 113579-03 introduces a NIS security bug (20.04.2004)

Discuss:

Read or add your comments to this news (0 comments)