518 matches found
CVE-2010-1679
Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package...
GNU C Library 2.x (libc6) - Dynamic Linker LD_AUDIT Arbitrary DSO Load Privilege Escalation
Source: http://marc.info/?l=full-disclosure&m=128776663124692&w=2 The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads ------------------------------------------------------------------------------- Cześć, This advisory describes CVE-2010-3856, an addendum to...
Ubuntu: Security Advisory (USN-986-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for dpkg vulnerability USN-986-3
Ubuntu Update for Linux kernel vulnerabilities USN-986-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN9863.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for dpkg vulnerability USN-986-3 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : dpkg vulnerability (USN-986-3)
USN-986-1 fixed vulnerabilities in bzip2. dpkg statically links against libbz2 and needed to be rebuilt to use the updated libbz2. An integer overflow was discovered in bzip2. If a user or automated system were tricked into decompressing a crafted bz2 file, an attacker could cause bzip2 or any...
USN-986-3: dpkg vulnerability
USN-986-1 fixed vulnerabilities in bzip2. dpkg statically links against libbz2 and needed to be rebuilt to use the updated libbz2. Original advisory details: An integer overflow was discovered in bzip2. If a user or automated system were tricked into decompressing a crafted bz2 file, an attacker...
[SECURITY] [DSA-2112-1] New bzip2 packages fix integer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA-2112-1 [email protected] http://www.debian.org/security/ Stefan Fritsch September 20, 2010 http://www.debian.org/security/faq -...
DSA-2112-1 bzip2 - integer overflow
Bulletin has no description...
Fedora 13 : dpkg-1.15.5.6-4.fc13 (2010-4410)
This update fixes CVE-2010-0396 - dpkg path traversal issue http://www.debian.org/security/2010/dsa-2011 http://seclists.org/fulldisclosure/2010/Mar/201 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...
Fedora 12 : dpkg-1.15.5.6-4.fc12 (2010-4371)
This update fixes CVE-2010-0396 - dpkg path traversal issue http://www.debian.org/security/2010/dsa-2011 http://seclists.org/fulldisclosure/2010/Mar/201 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...
Fedora 11 : dpkg-1.15.5.6-4.fc11 (2010-4344)
This update fixes CVE-2010-0396 - dpkg path traversal issue http://www.debian.org/security/2010/dsa-2011 http://seclists.org/fulldisclosure/2010/Mar/201 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...
CVE-2004-2768
dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable 1 setuid file, 2 setgid file, or 3 device, a related issue to CVE-2010-2059...
CVE-2004-2768
dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable 1 setuid file, 2 setgid file, or 3 device, a related issue to CVE-2010-2059...
DEBIAN-CVE-2004-2768
dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable 1 setuid file, 2 setgid file, or 3 device, a related issue to CVE-2010-2059...
CVE-2004-2768
dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable 1 setuid file, 2 setgid file, or 3 device, a related issue to CVE-2010-2059...
CVE-2004-2768
dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable 1 setuid file, 2 setgid file, or 3 device, a related issue to CVE-2010-2059...
CVE-2004-2768
The CVE-2004-2768 entry concerns dpkg 1.9.21 where metadata for a file is not properly reset during package upgrades. This could let local attackers gain privileges by creating a hard link to a vulnerable (1) setuid, (2) setgid, or (3) device file; the issue is related to CVE-2010-2059. The initi...
Fedora Update for dpkg FEDORA-2010-4371
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for dpkg FEDORA-2010-4344
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for dpkg FEDORA-2010-4371
Check for the Version of dpkg OpenVAS Vulnerability Test Fedora Update for dpkg FEDORA-2010-4371 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...