MDVA-2009:121 : pulseaudio

Multiple bugs has been identified and corrected in pulseaudio: - alsa: allow configuration of fallback device strings in profiles util: if NULL is passed to papathgetfilename just hand it through alsa: don't hit an assert when invalid module arguments are passed - alsa: fix wording, we are speaki...

MDVA-2010:107 : pulseaudio

The version of PulseAudio shipped with 2010.0 has had numerous bug fixes since it was released. This updates the PulseAudio package to 0.9.21 which contains most of the bug fixes the package versions from 0.9.17 through 0.9.21 are all considered bugfix updates. Additional fixes from the upstream...

Microsoft Windows - ASN.1 Library Bitstring Heap Overflow (MS04-007) (Metasploit)

$Id: ms04007killbill.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Mandriva Update for pulseaudio MDVSA-2010:124 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVSA-2010:124 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for pulseaudio MDVSA-2010:124 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVSA-2010:124 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Linux Security Advisory : pulseaudio (MDVSA-2010:124)

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file CVE-2009-1299. This update fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security...

Security fix for the ALT Linux 5 package samba version 3.0.37-alt2.M50P.1

June 16, 2010 Vitaly Kuznetsov 3.0.37-alt2.M50P.1 - CVE-2010-2063...

Mandriva Update for pulseaudio MDVA-2010:107 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVA-2010:107 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Mandriva Update for pulseaudio MDVA-2010:107 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVA-2010:107 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2131)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. This update also improves some latency...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2129)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2129)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. %NASLMINLEVEL 70300 C Tenable Network...

Debian DSA-2015-1 : drbd8 - privilege escalation

A local vulnerability has been discovered in drbd8. Philipp Reisner fixed an issue in the drbd kernel module that allows local users to send netlink packets to perform actions that should be restricted to users with CAPSYSADMIN privileges. This is a similar issue to those described by...

[SECURITY] [DSA 2015-1] New drbd8 packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-2015 [email protected] http://www.debian.org/security/ Dann Frazier March 15, 2010 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Debian DSA-2017-1 : pulseaudio - insecure temporary directory

Dan Rosenberg discovered that the PulseAudio sound server creates a temporary directory with a predictable name. This allows a local attacker to create a Denial of Service condition or possibly disclose sensitive information to unprivileged users. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory

------------------------------------------------------------------------ Debian Security Advisory DSA-2017-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory

------------------------------------------------------------------------ Debian Security Advisory DSA-2017-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2010 http://www.debian.org/security/faq -...

Debian DSA-1934-1 : apache2 - multiple issues

A design flaw has been found in the TLS and SSL protocol that allows an attacker to inject arbitrary content at the beginning of a TLS/SSL connection. The attack is related to the way how TLS and SSL handle session renegotiations. CVE-2009-3555 has been assigned to this vulnerability. As a partia...

Debian DSA-1838-1 : pulseaudio - privilege escalation

Tavis Ormandy and Julien Tinnes discovered that the pulseaudio daemon does not drop privileges before re-executing itself, enabling local attackers to increase their privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-1834-1 : apache2 - denial of service

CVE-2009-1890 A denial of service flaw was found in the Apache modproxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume large amounts of CPU time. This issue did not affect Debian 4.0 'etch'. - CVE-2009-1891 A denial of service...