[SECURITY] [DSA 4200-1] kwallet-pam security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4200-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 14, 2018 https://www.debian.org/security/faq -...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2018-10380

CVE-2018-10380 affects kwallet-pam in KDE KWallet prior to 5.12.6, where local users can exploit a symlink to obtain ownership of arbitrary files. The vulnerability stems from insecure permission handling in the PAM module, enabling local privilege elevation with complete confidentiality, integri...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

openSUSE Security Update : pam_kwallet (openSUSE-2018-423)

This update for pamkwallet fixes the following issues : Security issue fixed : - CVE-2018-10380: Fix local root vulnerability boo1090863. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2017-10380

The CVE-2017-10380 entry describes a vulnerability in Oracle Java SE’s Java Advanced Management Console (subcomponent: Server), affecting the 2.7 release. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the Java Advanced Management Console, with exploitation...

CVE-2016-10380

CVE-2016-10380 affects Qualcomm components in Android CAF builds and relates to an information disclosure where the UE can send unprotected MeasurementReports that reveal UE location. Affected environment is Qualcomm-based Android devices using CAF with the Linux kernel. The underlying issue is i...