Linux

The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.

Published: 2005-11-16T21:17:00.000Z
Updated: 2024-08-08T03:51:17.597Z

A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.

Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:26:28.671Z

Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.

Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:19:28.137Z

dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.

Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:03:49.020Z

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.

Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T02:56:38.516Z