Fedora 9 : emacspeak-28.0-3.fc9 (2008-8379)

Fri Sep 26 2008 Jens Petersen - 28.0-3 - CVE-2008-4191 fix tmpfile vulnerability in extract-table.pl with emacspeak-28.0-tmpfile.patch from upstream svn 463820 - Fri Sep 26 2008 Jens Petersen - 28.0-2 - fix broken generated deps reported by mtasaka 463899 - script the replacement of tcl with...

Fedora 8 : emacspeak-28.0-3.fc8 (2008-8423)

Fri Sep 26 2008 Jens Petersen - 28.0-3 - CVE-2008-4191 fix tmpfile vulnerability in extract-table.pl with emacspeak-28.0-tmpfile.patch from upstream svn 463819 - Fri Sep 26 2008 Jens Petersen - 28.0-2 - fix broken generated deps reported by mtasaka 463899 - script the replacement of tcl with...

CVE-2008-4191

extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file...

CVE-2008-4191

extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file...

CVE-2008-4191

extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file...

CVE-2008-4191

CVE-2008-4191 affects Emacspeak 26 and 28, where extract-table.pl can be exploited by a local user via a symlink attack on the temporary file extract-table.csv, enabling overwriting arbitrary files. The vulnerability arises from insecure handling of a /tmp-like file, with impact described as loca...

openSUSE 10 Security Update : krb5 (krb5-4191)

This update of krb5 fixes two bugs in kadmind that can be used to execute arbitrary code remotely. CVE-2007-3999, CVE-2007-4000 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-4191. The...

CVE-2007-4191

Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657...

CVE-2007-4191

CVE-2007-4191 affects Panda antivirus products (e.g., Panda Platinum Internet Security 2006/2007) where service executables are stored in the installation directory with weak permissions. The vulnerability allows local users to elevate privileges to LocalSystem by modifying executable files such ...

CVE-2006-4191

The CVE-2006-4191 issue affects XMB (Extreme Message Board) up to version 1.9.6. Affected component: memcp.php. Root cause: directory traversal via the langfilenew parameter allows an attacker to cause inclusion of local files, demonstrated by injecting PHP sequences into an Apache log file that ...

CVE-2005-4191

The CVE applies to Horde Nag Task List Manager H3, vulnerable in versions before 2.0.4 due to XSS in templates/tasklists/tasklists.inc (tasklist name/description). The root cause is cross‑site scripting in tasklists.inc, enabling remote authenticated users to inject arbitrary script/HTML when cre...