Jens Steube

The issue is related to the lack of protection for internal data in the Tcl component of the operating system. It can be exploited by a remote attacker to obtain sensitive information by leveraging SSLv2 support.

The issue allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message.

The issue allows local users to overwrite arbitrary files via a symlink attack on a log file.

The issue arises from improper privilege handling when processing certain user-supplied files, allowing local users to overwrite or create arbitrary files as root.

The issue affects the remstats package in Debian GNU/Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. Local users can create or overwrite arbitrary files via a symlink attack on temporary files when processing uptime data.

The issue concerns multiple vulnerabilities in the remstats package of the Debian GNU/Linux operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The remoteping service in remstats is specifically mentioned as having an unknown vulnerability that allows remote attackers to execute arbitrary commands due to missing input sanitizing.

The issue concerns multiple vulnerabilities in the ppxp package of the Debian GNU/Linux operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited by a local attacker. Specifically, ppxp does not drop root privileges before opening log files, allowing local users to execute arbitrary commands.