RedHat 6.2 Multiple Vulnerabilities Report (UUCP/Kerberos/Netscape)

Vulnerability Type: Multiple security vulnerabilities reported, including sgid uucpin bugzilla vulnerabilities, slrn issues, sgid uucp and C-Kermit issues, diskcheck problems, symlink issue in Mgetty-sendfax, DoS vulnerability in Kerberos, web attack vectors in netscapese, etc. Affected Scope: RedHat 6.2 system and associated programs and libraries such as C-Kermit, Diskcheck, Mgetty-sendfax, DoS attack vectors, etc. Detailed Vulnerability Report Links: Multiple Bugzilla links provided for detailed information on specific issues and possible patches, including: - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=11870 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=12750 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=11723 - Additional links refer to Bugzilla records in the email. Status and Impact: Some vulnerabilities have been reported but received no response, such as the sgid uucp issue; some issues have already been resolved, such as the disk space check problem in the latest rawhide release; others may have been fixed but details are unknown, such as the Kerberos DoS vulnerability. Discoverer: Stan Bubrouski, who discovered multiple vulnerabilities and submitted reports along with possible patches. Other Risks: Mentions potential issues with Gnome using eSound, and web security issues in Netscape, though these are not entirely attributable to inherent problems in the RedHat 6.2 system itself. Other Attack Vectors: Notes that Netscape's security settings parsing could be exploited, posing a new potential DoS attack vector for all systems using Netscape browsers. In God mode, Immunix OS 6.2 includes StackGuard protection technology, providing additional defense against known buffer overflow issues.

Goal Reached Thanks to every supporter — we hit 100%!

RedHat 6.2 Multiple Vulnerabilities Report (UUCP/Kerberos/Netscape)

More from this source