67 matches found
CVE-2006-3343
CVE-2006-3343 affects CrisoftRicette 1.0pre15b. A PHP remote file inclusion flaw in recipe/cookbook.php allows arbitrary PHP code execution via the crisoftricette parameter. CVSSv2 base score 7.5 (Network, Low complexity, No auth). Exploitation details and remediation are not disclosed in the pro...
Sophos Control Center Detection
Binary data 3343.prm...
[SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 927-2 [email protected] http://www.debian.org/security/ Martin Schulze December 29th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 927-2 [email protected] http://www.debian.org/security/ Martin Schulze December 29th, 2005 http://www.debian.org/security/faq -...
CVE-2005-3343
CVE-2005-3343 affects tkdiff prior to 4.1.1, where a symlink attack on temporary files allows local users to overwrite arbitrary files. The root cause is insecure temporary file handling in tkdiff. Impact is local privilege/partial data compromise for files within the attacker's ability to place ...
[SECURITY] [DSA 927-1] New tkdiff packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 927-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 927-1] New tkdiff packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 927-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...