90 matches found
CVE-2008-4993
CVE-2008-4993 is a Xen/QEMU flaw in which the qemu-dm.debug wrapper (present in Xen 3.2.1) allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/args. The issue has been acknowledged in multiple advisories (RHSA-2009:0003, ELSA-2009-0003, CESA-2009:0003) and appears al...
CVE-2008-4993: Improper Link Resolution Before File Access
qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...
Debian Security Advisory DSA 1384-1 (xen-utils)
The remote host is missing an update to xen-utils announced via advisory DSA 1384-1. OpenVAS Vulnerability Test $Id: deb13841.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1384-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1384-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1384-1 : xen-utils - several vulnerabilities
Several local vulnerabilities have been discovered in the Xen hypervisor packages which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-4993 By use of a specially crafted grub configuration file a domU us...
DSA-1384-1 xen-3.0
Bulletin has no description...
Important: xen security update
3.0.3-25.0.4.el5 - QEmu cirrus bitblit bounds check - CVE-2007-1320 rhbz 296271 - QEmu NE2000 overflow check - CVE-2007-1321 rhbz 296271 - Pygrub guest escape - CVE-2007-4993 rhbz 302821...
CVE-2006-4993
Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGconfigcfgserverpath parameter in 1 modules/AllMyGuests/signin.php aka the Nuke module and 2 AllMyGuests/signin.php aka the standalone...
CVE-2006-4993
AllMyGuests 0.4.1 and earlier are affected by multiple PHP remote file inclusion vulnerabilities. An attacker can trigger code execution by supplying a URL in the _AMGconfig[cfg_serverpath] parameter in (1) modules/AllMyGuests/signin.php and (2) AllMyGuests/signin.php (standalone). The issue stem...
