CVE-2008-4936

Description

References

• bugs.debian.org/496403
• dev.gentoo.org/~rbu/security/debiantemp/mgetty-fax · Exploit
• secunia.com/advisories/33051
• security.gentoo.org/glsa/glsa-200812-08.xml
• uvw.ru/report.lenny.txt
• openwall.com/lists/oss-security/2008/10/30/2
• securityfocus.com/bid/30927
• bugs.gentoo.org/show_bug.cgi
• bugs.gentoo.org/show_bug.cgi
• exchange.xforce.ibmcloud.com/vulnerabilities/44833

Autres vulnérabilités de mgetty

• CVE-2003-0516ÉLEVÉE 7.5cnd.c in mgetty 1.1.28 and earlier does not properly filter non-printable characters and quotes, which may allow remote attackers to execute…
• CVE-2002-1392FAIBLE 2.1faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmissi…
• CVE-2002-1391ÉLEVÉE 7.5Buffer overflow in cnd-program for mgetty before 1.1.29 allows remote attackers to cause a denial of service and possibly execute arbitrary …
• CVE-2001-0141FAIBLE 1.2mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
• CVE-2000-0691FAIBLE 2.1The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a s…