Date: May 28 2002
Vendor: Mandrake
Vulnerable systems: Mandrake Linux 8.2
Full advisory: http://www.net-security.org/advisory.php?id=722
Problem description: A bug exists in the UTF8 interaction between the perl-Digest-MD5 module and perl that results in UTF8 strings having improper MD5 digests. The 2.20 version of the module corrects this problem.



Title: Fetchmail prior 5.9.10 vulnerable
Date: May 28 2002
Vendor: Mandrake
Vulnerable systems: Mandrake Linux 7.1, 7.2, 8.0, 8.1, 8.2, Corporate Server 1.0.1, Single Network Firewall 7.2
Full advisory: http://www.net-security.org/advisory.php?id=723
Problem description: The fetchmail client will allocate an array to store the sizes of the messages it is attempting to retrieve. This array size is determined by the number of messages the server is claiming to have, and fetchmail would not check whether or not the number of messages the server was claiming was too high. This would allow a malicious server to make the fetchmail process write data outside of the array bounds.



Title: scoadmin command creates temporary files insecurely
Date: May 28 2002
Vendor: Caldera
Vulnerable systems: OpenServer 5.0.5, OpenServer 5.0.6

Full advisory: http://www.net-security.org/advisory.php?id=724
Problem description: The scoadmin command creates and uses temporary files insecurely. Names can be predicted, and spoofed with symbolic links.



Title: sort command creates temporary files
Date: May 28 2002
Vendor: Caldera
Vulnerable systems: OpenServer 5.0.5, OpenServer 5.0.6
Full advisory: http://www.net-security.org/advisory.php?id=725
Problem description: The sort command creates and uses temporary files insecurely. Names can be predicted, and spoofed with symbolic links.


Title: Tcpdump remote command execution
Date: May 29 2002
Vendor: SuSE
Vulnerable systems: SuSE Linux line of products 6.4, 7.0, 7.1, 7.2, 7.3, 8.0
Full advisory: http://www.net-security.org/advisory.php?id=726
Problem description: Tcpdump decodes certain packets such as AFS requests in a wrong way resulting in a buffer overflow. Since running tcpdump requires root privileges this may lead to a root compromise of the system running tcpdump.