95 matches found
SuSE 11 Security Update : glib2 (SAT Patch Number 1831)
When copying symbolic links the gfilecopy function set the target of the link to mode 0777 therefore exposing potentially sensitive information or allowing other user to modify files they should not have access to CVE-2009-3289. This has been fixed. This update also fixes a problem where glib2...
[security bulletin] HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02549477 Version: 1 HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery CSRF, Cross Site Scripting XSS, Privilege...
CVE-2010-3289
HP Systems Insight Manager (SIM) prior to version 6.2 is affected by CVE-2010-3289, a remote XSS vulnerability that could allow an attacker to inject arbitrary web script or HTML via unspecified vectors. The HP security bulletin summarizes the impact as XSS with no confidentiality/availability co...
openSUSE Security Update : glib2 (openSUSE-SU-2010:0156-1)
The when copying symbolic links the gfilecopy function set the target of the link to mode 0777 therefore exposing potentially sensitive information or allowing other user to modify files they should not have access to CVE-2009-3289. This update also fixes a problem where glib2 couldn't access...
Ubuntu USN-841-1 (glib2.0)
The remote host is missing an update to glib2.0 announced via advisory USN-841-1. OpenVAS Vulnerability Test $Id: ubuntu8411.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu8411.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-841-1 glib2.0 Authors:...
Mandrake Security Advisory MDVSA-2009:245 (glib2.0)
The remote host is missing an update to glib2.0 announced via advisory MDVSA-2009:245. OpenVAS Vulnerability Test $Id: mdksa2009245.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:245 glib2.0 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Mandriva Linux Security Advisory : glib2.0 (MDVSA-2009:245)
A vulnerability was discovered and corrected in glib2.0 : The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the...
CVE-2009-3289
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...
CVE-2009-3289
The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...
CVE-2009-3289
CVE-2009-3289 affects glib2.0: the g_file_copy function sets the target file permissions to 0777 when copying symbolic links, enabling user-assisted local modification of other users’ files. Affected software is glib2.0 (glib 2.0); several OS advisories reference fixes bundled with glib2 updates ...
CVE-2007-3289
PHP remote file inclusion vulnerability in spaw/spawcontrol.class.php in the WiwiMod 0.4 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...
CVE-2007-3289
CVE-2007-3289 is a PHP remote file inclusion vulnerability affecting the WiwiMod 0.4 module for XOOPS, in which an attacker can execute arbitrary PHP code by supplying a URL in the spaw_root parameter of spaw/spaw_control.class.php. The issue is noted as probably a duplicate of CVE-2006-4656. The...
CVE-2006-3289
CVE-2006-3289 denotes a cross-site scripting (XSS) vulnerability in the login page of Cisco Wireless Control System (WCS) HTTP interface for Linux and Windows, affected in versions prior to 3.2(51). The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving a m...
CVE-2005-3289
CVE-2005-3289 affects IBM AIX 5.2 and 5.3 where LSCFG fails to securely create temporary files, enabling local users to corrupt /etc/passwd and possibly other system files via the trace file. Connected sources corroborate the binary-level description but do not provide explicit patch/version reme...
