www/security.html - diff

Return to security.html CVS log

Up to [local] / www

version 1.184, 2001/09/12 13:52:39

version 1.185, 2001/10/22 22:09:54

Line 192

<p>

<ul>

<li><a href=errata.html#uucp>September 11, 2001:

<li><a href=errata29.html#uucp>September 11, 2001:

A security hole exists in uuxqt(8) that may allow an

attacker to gain root privileges.</a>

<li><a href=errata.html#lpd>August 29, 2001:

<li><a href=errata29.html#lpd>August 29, 2001:

A security hole exists in lpd(8) that may allow an

attacker to gain root privileges if lpd is running.</a>

<li><a href=errata.html#sendmail2>August 21, 2001:

<li><a href=errata29.html#sendmail2>August 21, 2001:

A security hole exists in sendmail(8) that may allow an

attacker on the local host to gain root privileges.</a>

<li><a href=errata.html#nfs>July 30, 2001:

<li><a href=errata29.html#nfs>July 30, 2001:

A kernel buffer overflow in the NFS code can be used to execute

arbitrary code by users with mount privileges (only root by

default).</a>

<li><a href=errata.html#kernexec>June 15, 2001:

<li><a href=errata29.html#kernexec>June 15, 2001:

A race condition in the kernel can lead to local root compromise.</a>

<li><a href=errata.html#sshcookie>June 12, 2001:

<li><a href=errata29.html#sshcookie>June 12, 2001:

sshd(8) allows users to delete arbitrary files named "cookies"

if X11 forwarding is enabled. X11 forwarding is disabled

by default.</a>

<li><a href=errata.html#fts>May 30, 2001:

<li><a href=errata29.html#fts>May 30, 2001:

Programs using the fts routines can be tricked into changing

into the wrong directory.</a>

<li><a href=errata.html#sendmail>May 29, 2001:

<li><a href=errata29.html#sendmail>May 29, 2001:

Sendmail signal handlers contain unsafe code,

leading to numerous race conditions.</a>

</ul>