HP UX, Mandrake Linux Net flaws detected

Danish security company Secunia has highlighted what it denotes as 'highly critical' vulnerabilities in Mandrake 9.1 and HP's version of Unix HP UX. The latter involves a number of holes discovered in the Netscape browser for HP-UX. If exploited they would give an attacker remote access to system information and data as well as opportunities to run code or knock out the system altogether with a Denial of Service attack. HP's answer is to upgrade to the latest release of Mozilla, which share the same Gecko engine as Netscape at www.hp.com/go/mozilla.

Mandrake has also made patches available for a 'highly critical' buffer overrun vulnerability in the 32- and 64-bit versions of Mandrake 9.1 and upwards and of Corporate Server 2.1. The problem exists in the mod_proxy module of the Apache web server. Mandrake users are advised stop Apache and then to auto-update as soon as possible.

Read Full Story