Vulnerabilidades

Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.

The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.

Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.

The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.

read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.

The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.

GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files.

The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.

wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself.

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

Land IP denial of service.

Denial of service of inetd on Linux through SYN and RST packets.

The Perl fingerd program allows arbitrary command execution from remote users.

Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.

A version of finger is running that exposes valid user information to any entity on the network.

Buffer overflow in NLS (Natural Language Service).

(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \w option in the PS1 variable.