Title: OpenServer popper buffer overflow and denial of service
Date: May 22 2002
Vendor: Caldera
Vulnerable systems: OpenServer 5.0.5 and OpenServer 5.0.6
Full advisory: http://www.net-security.org/advisory.php?id=716
Problem description: /etc/popper will go into a loop if a character string of length 2048 (or more) is sent to it. If the bulldir variable in the user's config file is longer than 256 characters, popper will memory fault.



Title: Remote buffer overflow in imap
Date: May 24 2002
Vendor: Connectiva
Vulnerable systems: Conectiva Linux 6.0, 7.0, 8
Full advisory: http://www.net-security.org/advisory.php?id=717
Problem description: This vulnerability can be exploited by a remote attacker after he or she has been successfully authenticated by the server. Arbitrary code could then be executed, but with the privileges of the authenticated user.



Title: Cross site scripting vulnerability in mailman
Date: May 24 2002
Vendor: Conectiva
Vulnerable systems: Conectiva Linux 6.0, 7.0, 8
Full advisory: http://www.net-security.org/advisory.php?id=718

Problem description: Barry A. Warsaw announced a new version of mailman that fixes two cross site scripting vulnerabilities. According to this announcement, "office" reported such a vulnerability in the login page, and Tristan Roddis reported one in the Pipermail index summaries.



Title: Buffer overflow in UW imap daemon
Date: May 22 2002
Vendor: Red Hat
Vulnerable systems: Red Hat Linux 6.2, 7.1, 7.2
Full advisory: http://www.net-security.org/advisory.php?id=719
Problem description: The UW imap daemon contains a buffer overflow which allows a logged in, remote user to execute commands on the server with the user's UID/GID.



Title: Updated nss_ldap packages fix pam_ldap vulnerability
Date: May 26 2002
Vendor: Red Hat
Vulnerable systems: Red Hat Linux 6.2, 7.1, 7.2, 7.3
Full advisory: http://www.net-security.org/advisory.php?id=721
Problem description: Updated nss_ldap packages are now available for Red Hat Linux 6.2, 7.0, 7.1, 7.2, and 7.3. These packages fix a string format vulnerability in the pam_ldap module.



Title: perl-Digest-MD5 bug