20519 matches found
CVE-2011-5330
Distributed Ruby aka DRuby 1.8 mishandles the sending of syscalls...
CVE-2011-5330
Technical details about CVE-2011-5330 are not publicly available in the provided documents. The entries only state that Distributed Ruby (DRuby) 1.8 mishandles the sending of syscalls. Monitor for updates from vendors and security advisories.
CVE-2011-2916
qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions...
CVE-2011-2916
qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions...
CVE-2011-2916
CVE-2011-2916 affects qtnx 0.9, where non-custom SSH keys are stored in a world-readable configuration file. The underlying issue is that if a user has a world-readable or world-executable home directory, another local user could obtain the private key used to connect to remote NX sessions. Docum...
CVE-2011-0703
In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session...
CVE-2011-2910
The AX.25 daemon ax25d in ax25-tools before 0.0.8-13 does not check the return value of a setuid call. The setuid call is responsible for dropping privileges but if the call fails the daemon would continue to run with root privileges which can allow possible privilege escalation...
CVE-2011-2910
The vulnerability CVE-2011-2910 affects the AX.25 daemon (ax25d) in ax25-tools prior to version 0.0.8-13. The issue is that the daemon does not check the return value of setuid, which is intended to drop privileges. If setuid fails, the process may continue running with root privileges, enabling ...
CVE-2011-2726
Summary (CVE-2011-2726) : Drupal 7.x before 7.5 is affected by an access-bypass vulnerability related to file attachments in comments. If a site enables File upload fields on any entity or points fields to the private file directory, non-privileged users can download a file attached to a comment ...
CVE-2011-0703
In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session...
CVE-2011-0703
The CVE-2011-0703 issue affects gksu-polkit prior to 0.0.3, where the xauth source file may contain arbitrary commands. This could allow an attacker to take over an administrator X11 session. Connected sources corroborate the same description (gksu-polkit
CVE-2011-1930
In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options...
CVE-2011-1488
A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent...
CVE-2011-1930
CVE-2011-1930 affects klibc 1.5.20 and 1.5.21; DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped, enabling a remote attacker to craft a DHCP reply that could execute arbitrary code with the privileges of the process sourcing DHCP options. Multiple advisories (RH, ...
CVE-2011-1588
Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error...
CVE-2011-1588
CVE-2011-1588 affects Thunar up to version 1.3.1, where a crash can occur when copying and pasting a file name containing % format characters due to a format string error. The root cause is a faulty format string handling in the relevant code path. The connected advisories indicate a fix in the O...
CVE-2011-1490
Conrete details available: CVE-2011-1490 affects rsyslog before 5.7.6. The vulnerability is a memory leak in the logging path when multiple rulesets are used, where some output batches contain messages from more than one ruleset. Local attackers could trigger a denial of service by causing rsyslo...
CVE-2011-1489
CVE-2011-1489 concerns rsyslog before 5.7.6. The connected documents consistently describe a memory leak in the daemon’s handling of log messages when multiple rulesets are used, causing a local denial of service by logging a message associated with more than one ruleset. The affected component i...
CVE-2011-1488
CVE-2011-1488 affects rsyslogd prior to 5.7.6. The issue is a memory leak in how log messages are logged when RepeatedMsgReduction is enabled, which a local attacker can exploit to crash the rsyslogd daemon by flooding it with a sequence of repeated messages in a short time. Publicly available co...