===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/errata31.html,v
retrieving revision 1.60
retrieving revision 1.61
diff -u -r1.60 -r1.61
--- www/errata31.html 2014/03/31 03:36:54 1.60
+++ www/errata31.html 2014/03/31 16:02:48 1.61
@@ -78,7 +78,8 @@
-
-027: SECURITY FIX: March 31, 2003 All architectures
+027: SECURITY FIX: March 31, 2003
+ All architectures
A buffer overflow in the address parsing in
sendmail(8)
may allow an attacker to gain root privileges.
@@ -86,7 +87,8 @@
A source code patch exists which remedies this problem.
-
-026: SECURITY FIX: March 24, 2003 All architectures
+026: SECURITY FIX: March 24, 2003
+ All architectures
The cryptographic weaknesses in the Kerberos v4 protocol can be exploited
on Kerberos v5 as well.
@@ -94,7 +96,8 @@
A source code patch exists which remedies this problem.
-
-025: SECURITY FIX: March 19, 2003 All architectures
+025: SECURITY FIX: March 19, 2003
+ All architectures
OpenSSL is vulnerable to an extension of the ``Bleichenbacher'' attack designed
by Czech researchers Klima, Pokorny and Rosa.
@@ -102,14 +105,16 @@
A source code patch exists which remedies this problem.
-
-024: SECURITY FIX: March 18, 2003 All architectures
+024: SECURITY FIX: March 18, 2003
+ All architectures
Various SSL and TLS operations in OpenSSL are vulnerable to timing attacks.
A source code patch exists which remedies this problem.
-
-023: SECURITY FIX: March 5, 2003 All architectures
+023: SECURITY FIX: March 5, 2003
+ All architectures
A fix for an
lprm(1)
bug made in 1996 contains an error that could lead to privilege escalation.
@@ -118,7 +123,8 @@
A source code patch exists which remedies this problem.
-
-022: SECURITY FIX: March 3, 2003 All architectures
+022: SECURITY FIX: March 3, 2003
+ All architectures
A buffer overflow in the envelope comments processing in
sendmail(8)
may allow an attacker to gain root privileges.
@@ -126,7 +132,8 @@
A source code patch exists which remedies this problem.
-
-021: SECURITY FIX: February 23, 2003 All architectures
+021: SECURITY FIX: February 23, 2003
+ All architectures
In
ssl(8) an information leak can occur via timing by performing a MAC computation
even if incorrect block cipher padding has been found, this is a
@@ -135,7 +142,8 @@
A source code patch exists which fixes these two issues.
-
-020: SECURITY FIX: January 20, 2003 All architectures
+020: SECURITY FIX: January 20, 2003
+ All architectures
A double free in
cvs(1)
could allow an attacker to execute code with the privileges of the
@@ -147,7 +155,8 @@
A source code patch exists which remedies this problem.
-
-019: SECURITY FIX: November 14, 2002 All architectures
+019: SECURITY FIX: November 14, 2002
+ All architectures
A buffer overflow in
named(8)
could allow an attacker to execute code with the privileges of named.
@@ -157,7 +166,8 @@
A source code patch exists which remedies this problem.
-
-018: SECURITY FIX: November 6, 2002 All architectures
+018: SECURITY FIX: November 6, 2002
+ All architectures
Incorrect argument checking in the
getrlimit(2)
system call may allow an attacker to crash the kernel.
@@ -165,7 +175,8 @@
A source code patch exists which remedies this problem.
-
-017: SECURITY FIX: November 6, 2002 All architectures
+017: SECURITY FIX: November 6, 2002
+ All architectures
An attacker can bypass the restrictions imposed by sendmail's restricted shell,
smrsh(8),
and execute arbitrary commands with the privileges of his own account.
@@ -173,7 +184,8 @@
A source code patch exists which remedies this problem.
-
-016: SECURITY FIX: October 21, 2002 All architectures
+016: SECURITY FIX: October 21, 2002
+ All architectures
A buffer overflow can occur in the
kadmind(8)
daemon, leading to possible remote crash or exploit.
@@ -181,14 +193,16 @@
A source code patch exists which remedies this problem.
-
-015: SECURITY FIX: October 2, 2002 All architectures
+015: SECURITY FIX: October 2, 2002
+ All architectures
Incorrect argument checking in the
setitimer(2) system call may allow an attacker to write to kernel memory.
A source code patch exists which remedies this problem.
-
-014: SECURITY FIX: August 11, 2002 All architectures
+014: SECURITY FIX: August 11, 2002
+ All architectures
An insufficient boundary check in the
select(2)
system call allows an attacker to overwrite kernel memory and execute arbitrary
@@ -197,7 +211,8 @@
A source code patch exists which remedies this problem.
-
-013: SECURITY FIX: July 30, 2002 All architectures
+013: SECURITY FIX: July 30, 2002
+ All architectures
Several remote buffer overflows can occur in the SSL2 server and SSL3 client of the
ssl(8)
library, as in the ASN.1 parser code in the
@@ -209,7 +224,8 @@
This is the second version of the patch.
-
-012: SECURITY FIX: July 29, 2002 All architectures
+012: SECURITY FIX: July 29, 2002
+ All architectures
A buffer overflow can occur in the
xdr_array(3)
RPC code, leading to possible remote crash.
@@ -219,7 +235,8 @@
This is the second version of the patch.
-
-011: SECURITY FIX: July 29, 2002 All architectures
+011: SECURITY FIX: July 29, 2002
+ All architectures
A race condition exists in the
pppd(8)
daemon which may cause it to alter the file permissions of an arbitrary file.
@@ -227,7 +244,8 @@
A source code patch exists which remedies this problem.
-
-010: RELIABILITY FIX: July 5, 2002 All architectures
+010: RELIABILITY FIX: July 5, 2002
+ All architectures
Receiving IKE payloads out of sequence can cause
isakmpd(8) to crash.
@@ -236,26 +254,30 @@
This is the second version of the patch.
-
-009: SECURITY FIX: June 27, 2002 All architectures
+009: SECURITY FIX: June 27, 2002
+ All architectures
The kernel would let any user ktrace(2) set[ug]id processes.
A source code patch exists which remedies this problem.
-
-008: SECURITY FIX: June 26, 2002 All architectures
+008: SECURITY FIX: June 26, 2002
+ All architectures
A buffer overflow can occur in the .htaccess parsing code in mod_ssl httpd
module, leading to possible remote crash or exploit.
A source code patch exists which remedies this problem.
-
-007: SECURITY FIX: June 25, 2002 All architectures
+007: SECURITY FIX: June 25, 2002
+ All architectures
A potential buffer overflow in the DNS resolver has been found.
A source code patch exists which remedies this problem.
-
-006: SECURITY FIX: June 24, 2002 All architectures
+006: SECURITY FIX: June 24, 2002
+ All architectures
All versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an input validation
error that can result in an integer overflow and privilege escalation.
This problem is fixed in OpenSSH
@@ -263,14 +285,16 @@
security advisory.
-
-005: SECURITY FIX: June 19, 2002 All architectures
+005: SECURITY FIX: June 19, 2002
+ All architectures
A buffer overflow can occur during the interpretation of chunked
encoding in the http daemon, leading to possible remote crash or exploit.
A source code patch exists which remedies this problem.
-
-004: SECURITY FIX: May 22, 2002 All architectures
+004: SECURITY FIX: May 22, 2002
+ All architectures
Under certain conditions, on systems using YP with netgroups in the
password database, it is possible that
sshd(8)
@@ -282,7 +306,8 @@
A source code patch exists which remedies this problem.
-
-003: SECURITY FIX: May 8, 2002 All architectures
+003: SECURITY FIX: May 8, 2002
+ All architectures
A race condition exists where an attacker could fill the file descriptor
table and defeat the kernel's protection of fd slots 0, 1, and 2 for a
setuid or setgid process.
@@ -290,13 +315,15 @@
A source code patch exists which remedies this problem.
-
-002: SECURITY FIX: April 25, 2002 All architectures
+002: SECURITY FIX: April 25, 2002
+ All architectures
A bug in sudo(8) may allow an attacker to corrupt the heap by specifying a custom prompt.
A source code patch exists which remedies this problem.
-
-001: SECURITY FIX: April 22, 2002 All architectures
+001: SECURITY FIX: April 22, 2002
+ All architectures
A local user can gain super-user privileges due to a buffer overflow
in sshd(8)
if AFS has been configured on the system or if