Mark J. Cox

The issue allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the `spool directory` directive.

The issue affects the Web Console in the Application Server, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters in createSnapshot.jsp and createThresholdMonitor.jsp, including `monitorName`, `objectName`, `attribute`, `period`, `threshold`, and `enabled`.

The Java Web Start implementation does not properly handle the interaction between a signed JAR file and a JNLP application or applet. This issue is related to a regression.

The issue is related to an unspecified vulnerability in the TrueType font parsing functionality. This vulnerability allows remote attackers to cause a denial of service, resulting in an application crash, via a certain test suite.

The issue allows local users to gain privileges by exploiting NULL pointer dereference vulnerabilities. This is related to the default configuration of the `allow unconfined mmap low` boolean in SELinux, an error that causes `allow unconfined mmap low` to be ignored, lack of a requirement for the `CAP SYS RAWIO` capability for certain mmap operations, and interaction between the `mmap min addr` protection mechanism and certain application programs.

A heap-based buffer overflow issue exists in the regular-expression parser of Mozilla Network Security Services (NSS), which can be triggered by a long domain name in the subject's Common Name (CN) field of an X.509 certificate. This issue may allow remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code. The issue is related to the `cert TestHostName` function.

The issue arises from the Replace function in the capp-lspp-config script, which uses `lstat` instead of `stat` to determine file permissions. This leads to a change in permissions for the /etc/pam.d/system-auth-ac file, making it world-writable. As a result, local users can modify this file to gain privileges.

The issue is related to a stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function, which might allow remote attackers to execute arbitrary code. This could lead to a disruption of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.

The issue concerns the `sys mbind` function in `mempolicy.c`, which fails to perform a sanity check on the `maxnod` variable before proceeding with computations for the `get nodes` function. The impact and attack vectors of this issue are not explicitly stated.

The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a certain "bad BER sequence" that leads to the freeing of uninitialized memory. This can be demonstrated using the ProtoVer LDAP test suite.

Name of the Vulnerable Software and Affected Versions: Linux kernel in Red Hat Enterprise Linux 4 Description: The issue is related to the rw vm function in usercopy.c, which does not perform proper bounds checking. This allows local users to cause a denial of service, resulting in a system crash. Recommendations: For Linux kernel in Red Hat Enterprise Linux 4, consider applying a patch that fixes the bounds checking issue in the rw vm function as a permanent solution. As a temporary workaround, restrict local user privileges to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Groff package versions 1.18 and later Description: The issue allows local users to overwrite files via a symlink attack on temporary files created by the groffer script. This is a problem in the Groff package, which is used in various operating systems, including Trustix Secure Linux versions 1.5 through 2.1. Recommendations: For Groff package versions 1.18 and later, consider restricting access to the groffer script until a fix is available, or apply configuration changes to prevent the creation of temporary files that can be targeted by a symlink attack.

The issue allows local users to overwrite files via a symlink attack on temporary files, potentially leading to disruption of protected information integrity. This can be exploited by a local attacker.

The issue allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface, specifically through the `ipq read` and `ipulog read` functions.

The issue affects the Linux kernel and SUSE Linux Enterprise, involving multiple vulnerabilities in various packages. These vulnerabilities can be exploited locally, potentially leading to disruptions in confidentiality, integrity, and availability of protected information. The raw sendmsg function in the Linux kernel is specifically mentioned as allowing local users to cause a denial of service or read from arbitrary memory via crafted input.

The issue involves multiple vulnerabilities in various packages of the openSUSE operating system, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

The issue involves multiple vulnerabilities in various packages of the openSUSE operating system, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Additionally, a vulnerability in the Linux kernel before version 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (mmap) IO space.

The issue is related to multiple vulnerabilities in the Debian GNU/Linux kernel and related packages. These vulnerabilities can be exploited remotely, potentially leading to a denial of service (crash) or disruption of protected information. The hugepage code in the Linux kernel 2.6 is also affected, allowing local users to cause a denial of service by triggering an mmap error before a prefault.

The issue is related to multiple vulnerabilities in the Lynx package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Specifically, a stack-based buffer overflow in the `HTrjis` function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape (ESC) characters.

The issue is related to multiple vulnerabilities in the Linux kernel, which can lead to a violation of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges.