CVE-2011-2924

CVE-2011-2924 affects the foomatic-rip filter (v4.0.12 and earlier). The flaw arises from insecure temporary file handling when rendering PostScript data in debug mode, enabling a local attacker to perform symlink attacks to overwrite arbitrary files accessible to the user running the foomatic-ri...

CVE-2011-2923

foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...

CVE-2011-2923

foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...

CVE-2011-2923

foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...

CVE-2011-2923

foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...

CVE-2011-2923

CVE-2011-2923 concerns the foomatic-rip filter (all versions) where insecure use of temporary files for storage of PostScript data occurs when debug mode is enabled. The vulnerability stems from rendering the data with debug-enabled temporary files, which an attacker with local access can abuse t...

CVE-2011-2922

ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTKMODULES" environment variable to possibly execute arbitrary code...

CVE-2011-2922

CVE-2011-2922 affects ktsuss versions 1.4 and earlier, where the GTK interface is spawned with root privileges. This local vulnerability can allow an attacker to escalate to root and potentially abuse the GTK_MODULES environment variable to execute arbitrary code. Connected sources confirm the ro...

CVE-2011-2921

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges...

CVE-2011-2921

CVE-2011-2921 affects ktsuss versions 1.4 and earlier. The binary is setuid root and does not drop privileges before executing user-specified commands, allowing command execution with root privileges. Public references describe local privilege-escalation risk (no remote vectors stated here); rela...

CVE-2011-4919

mpack 1.6 has information disclosure via eavesdropping on mails sent by other users...

CVE-2011-4954

cobbler has local privilege escalation via the use of insecure location for PYTHONEGGCACHE...

CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

CVE-2011-4954

CVE-2011-4954 affects Cobbler, a network installation server, with a local privilege-escalation flaw arising from using an insecure location for PYTHON_EGG_CACHE. The connected security entries (SUSE, Ubuntu, CNVD/CVE lists) confirm Cobbler as the affected component and describe local root-level ...

CVE-2011-4919

CVE-2011-4919 affects mpack 1.6, described as a information disclosure vulnerability enabling eavesdropping on mails sent by other users. The connected records consistently state the issue and its generic impact (information disclosure) but do not provide a vendor patch/version that fixes it. No ...

CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

CVE-2011-4968

CVE-2011-4968 concerns the nginx http proxy module failing to verify the peer identity of the HTTPS origin server, enabling potential MITM attacks. The vulnerability is described as an information-security issue in the nginx proxy component where TLS peer verification is not performed for upstrea...

CVE-2011-4967

CVE-2011-4967, titled tog-Pegasus hash collision DoS vulnerability, affects the tog-Pegasus package (hash collision in its XML table) and is described across multiple sources as a DoS vector with a network attack surface. NVD lists CVSS2/3.1 base scores of 5.0 (Medium) and 7.5 (High) respectively...

CVE-2011-5330

Distributed Ruby aka DRuby 1.8 mishandles the sending of syscalls...

CVE-2011-5331

CVE-2011-5331 affects Distributed Ruby (DRuby) 1.8, described as a mishandling of instance_eval. The connected documents corroborate this description but do not provide concrete affected versions beyond DRuby 1.8, nor any explicit patch/version for remediation. Exploitation status is not detailed...