Title: Imap server buffer overflow
Date: May 30 2002
Vendor: Mandrake
Vulnerable systems: Mandrake Linux 7.1, 7.2, 8.1, 8.2, Corporate Server 1.0.1
Full advisory: http://www.net-security.org/advisory.php?id=731
Problem description: A buffer overflow was discovered in the imap server that could allow a malicious user to run code on the server with the uid and gid of the email owner by constructing a malformed request that would trigger the buffer overflow.



Title: Ftpd allows data connection hijacking via PASV mode
Date: May 30 2002
Vendor: Caldera
Vulnerable systems: Open UNIX 8.0.0 UnixWare 7.1.1
Full advisory: http://www.net-security.org/advisory.php?id=732
Problem description: If an attacker can make a connection to the listening port before the client connects, the server will transmit the data to the attacker instead of the client.



Title: Updated tcpdump packages fix buffer overflow
Date: May 30 2002
Vendor: Red Hat
Vulnerable systems: Red Hat Linux 6.2 and 7.x
Full advisory: http://www.net-security.org/advisory.php?id=734
Problem description: tcpdump is a command-line tool for monitoring network traffic. Versions of tcpdump up to and including 3.6.2 have a buffer overflow that can be triggered when tracing the network by a bad NFS packet.




Title: in.uucpd string truncation problem
Date: May 30 2002
Vendor: Debian
Vulnerable systems: Debian GNU/Linux 2.2
Full advisory: http://www.net-security.org/advisory.php?id=735
Problem description: in.uucpd, an authentication agent in the uucp package, does not properly terminate certain long input strings.



Title: Memory allocation error in ethereal
Date: May 30 2002
Vendor: Debian
Vulnerable systems: Debian GNU/Linux 2.2
Full advisory: http://www.net-security.org/advisory.php?id=736
Problem description: Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal.



Title: Directory Administrator password in cleartext
Date: June 3 2002
Vendor: Caldera