Linux Distros Unpatched Vulnerability : CVE-2023-37378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory. CVE-2023-37378 Note that Nessus relies on the presen...

Debian dla-3874 : nsis - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3874 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3874-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3874-1] nsis security update

Debian LTS Advisory DLA-3874-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert September 05, 2024 https://wiki.debian.org/LTS Package : nsis Version : 3.06.1-1+deb11u1 CVE ID : CVE-2023-37378 Debian Bug : 1040880 CVE-2023-37378 Nullsoft Scriptable Install System NS...

Updated mingw-nsis packages fix security vulnerability

Mishandles access control for an uninstaller directory. CVE-2023-37378...

MGASA-2023-0236 Updated mingw-nsis packages fix security vulnerability

Mishandles access control for an uninstaller directory. CVE-2023-37378...

Fedora: Security Advisory for mingw-nsis (FEDORA-2023-b9ec99605f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : mingw-nsis (2023-dfb6cc599f)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-dfb6cc599f advisory. Update to 3.09, fixes CVE-2023-37378. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

CVE-2023-37378 concerns Nullsoft Scriptable Install System (NSIS) prior to 3.09, where an uninstaller directory’s access control is mishandled. This could enable an attacker with local access to abuse the uninstaller folder if NSIS is used on a system, potentially permitting escalation of privile...