CentOS Update for tar CESA-2010:0141 centos4 i386

Check for the Version of tar OpenVAS Vulnerability Test CentOS Update for tar CESA-2010:0141 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

tar security update

CentOS Errata and Security Advisory CESA-2010:0141 An updated tar package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files...

tar security update

2:1.15.1-23.0.1.2 - CVE-2007-4476 - fix stack crashing in safernamesuffix - CVE-2010-0624 - fix heap-based buffer overflow by expanding a specially-crafted archive...

CVE-2009-4476

CVE-2009-4476 describes a stack-based buffer overflow in HAURI ViRobot Desktop 5.5 prior to 2009-09-28.00, allowing remote code execution via unspecified vectors. The vulnerability is demonstrated by a module in VulnDisco Pack Professional 7.15–8.11. Public sources in the provided documents do no...

Mandrake Security Advisory MDVSA-2009:263 (sympa)

The remote host is missing an update to sympa announced via advisory MDVSA-2009:263. OpenVAS Vulnerability Test $Id: mdksa2009263.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:263 sympa Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:263 (sympa)

The remote host is missing an update to sympa announced via advisory MDVSA-2009:263. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Sympa 'sympa.pl' Insecure Temporary File Creation Vulnerability

Sympa creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete...

SLES9: Security update for cpio

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cpio For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013486 within the SuSE...

Ubuntu 6.06 LTS / 7.10 : tar vulnerability (USN-709-1)

Dmitry V. Levin discovered a buffer overflow in tar. If a user or automated system were tricked into opening a specially crafted tar file, an attacker could crash tar or possibly execute arbitrary code with the privileges of the user invoking the program. Note that Tenable Network Security has...

Fedora Update for tar FEDORA-2007-2800

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cpio FEDORA-2007-2827

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for tar FEDORA-2007-735

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for tar FEDORA-2007-2673

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu USN-709-1 (tar)

The remote host is missing an update to tar announced via advisory USN-709-1. OpenVAS Vulnerability Test $Id: ubuntu7091.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7091.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-709-1 tar Authors: Thomas Reinke...

FreeBSD Ports: gtar

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ubuntu USN-708-1 (hplip)

The remote host is missing an update to hplip announced via advisory USN-708-1. OpenVAS Vulnerability Test $Id: ubuntu7081.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7081.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-708-1 hplip Authors: Thomas Reinke...

FreeBSD : gtar -- GNU TAR safer_name_suffix Remote Denial of Service Vulnerability (0809ce7d-f672-4924-9b3b-7c74bc279b83)

SecurityFocus reports : GNUs tar and cpio utilities are prone to a denial-of-service vulnerability because of insecure use of the alloca function. Successfully exploiting this issue allows attackers to crash the affected utilities and possibly to execute code but this has not been confirmed...

CVE-2008-4476

sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympaaliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability...

CVE-2008-4476

Sympa vulnerability CVE-2008-4476 affects sympa.pl in sympa 5.3.4, where local users can overwrite arbitrary files via a symlink attack on the temporary file /tmp/sympa_aliases.$$. The related note states wwsympa.fcgi was reported but the issue occurred in a dead function, so it is not a vulnerab...

USN-650-1: cpio vulnerability

A buffer overflow was discovered in cpio. If a user were tricked into opening a crafted cpio archive, an attacker could cause a denial of service via application crash, or possibly execute code with the privileges of the user invoking the program. CVE-2007-4476...