|
|
 |
 News: Forums |
2/16/2001 17:16 |
 |
| August 14, 2000 - Linux Security Week - August 14, 2000 |
| This week, advisories for VariCAD, diskcheck, Netscape, usermode, perl, gopherd, Zope, MandrakeUpdate, pam, umb-scheme, knfsd, mopd, and ntop were released. Of these, perl, usermode, gopherd, and knfsd can be exploited to gain root access. Recently, part of our staff left . . . |
| August 7, 2000 - Linux Security Week, August 7, 2000 |
| For this week, advisories for mailman, netscape, cvsweb, kon2, and pam_console. Of these, remote root vulnerabilities are present in cvsweb and kon2. Our feature for this week is an article discussing the US and UK governments want to . . . |
| August 4, 2000 - Discussion of "Linux Sux Redux" Issue |
| Peter writes, "This is in response to an article posted at abcnews.com by Fred Moody, available at: ABC News, in which he claims that Linux is a far less secure operating system than NT, based on his interpretation of the Bugtraq vulnerability statistics. . . . |
| July 31, 2000 - Linux Security Week, July 31st 2000 |
| This week, advisories for gpm, man, dhcp-client, Zope, openldap, BitchX, pam, and nfs-utils were released. DHCP-client and nfs-utils vulnerabilities can both theoretically be used to gain remote root access. . . . |
| July 27, 2000 - Fears Prompt Cyber Security Summit |
| Participants in a cyber security summit yesterday struggled over how to regulate something with no laws, no government, and no geographic boundaries -- the Internet. . . . |
| July 24, 2000 - Linux Security Week, July 24, 2000 |
| This week, advisories for the nfs-utils vulnerability were released. Although there are currently no known exploits for this bug, in theory, it can be used for gaining root access remotely. Advisories for nkitb, LISTSERV, wu-ftpd, gpm, and dhcp were also . . . |
| July 17, 2000 - Linux Security Week, July 17th 2000 |
| This week, several vendors released patches for packages such as: cvsweb, popper, canna, wu-ftpd, dump, dhclient, tnef, and Apache::ASP. Although most of these problems surfaced weeks ago, it is important that you check for and implement each update provided by your current distro. . . . |
| July 10, 2000 - Linux Security Week, July 10th 2000 |
| This week, several vendors released patches for a denial of service vulnerability in BitchX. It is caused by improper handling of incoming invitation messages. Any user on IRC can send the client an invitation message that causes BitchX to segfault. Patches were also released for man. The problem exists because the makewhatis portion of the man package uses files in /tmp in an insecure fashion. It was possible for local users to exploit this vulnerability to modify files that they normally could not. . . . |
| July 3, 2000 - Linux Security Week, July 3rd 2000 |
| This week, several other vendors released patches for the wu-ftp vulnerability. If you're not already familiar with this problem, it exists in wu-ftpd's handling of the SITE EXEC command. The default configuration of wu-ftpd is vulnerable to remote users . . . |
| June 26, 2000 - Linux Security Week, June 26th 2000 |
| Multiple vendors released fixes for the serious wu-ftpd vulnerability. The problem exists in wu-ftpd's handling of the SITE EXEC command. The default configuration of wu-ftpd is vulnerable to remote users gaining root access. . . . |
<--Previous Page
1
2
3
4
5
6
7
8
9
10
Next Page -->
Next 10 Pages -->
|  |
|
 |
|
