MGASA-2014-0313 Updated cups packages fix security vulnerability

In CUPS before 1.7.4, a local user with privileges of group=lp can write symbolic links in the rss directory and use that to gain '@SYSTEM' group privilege with cupsd CVE-2014-3537. It was discovered that the web interface in CUPS incorrectly validated permissions on rss files and directory index...

[DLA-0022-1] cups security update

Debian Security Advisory DLA-0022-1 https://wiki.debian.org/LTS - --------------------------------------------------------------------- Package : cups Version : 1.4.4-7+squeeze6 CVE ID : CVE-2014-3537 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 It was discovered that the web interface in CUPS, the...

DLA-0022-1 cups - security update

Bulletin has no description...

Information disclosure

The web interface in CUPS before 2.0 does not check that files have world-readable permissions, which allows remote attackers to obtains sensitive information via unspecified vectors...

Ubuntu: Security Advisory (USN-2293-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2990-1 : cups - security update

It was discovered that the web interface in CUPS, the Common UNIX Printing System, incorrectly validated permissions on rss files and directory index files. A local attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege...

[SECURITY] [DSA 2990-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2990-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...

USN-2293-1 cups vulnerability

Francisco Alonso discovered that the CUPS web interface incorrectly validated permissions on rss files. A local attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation...

USN-2293-1: CUPS vulnerability

Francisco Alonso discovered that the CUPS web interface incorrectly validated permissions on rss files. A local attacker could possibly use this issue to bypass file permissions and read arbitrary files, possibly leading to a privilege escalation...

Ubisoft Uplay 4.6 - Insecure File Permissions Local Privilege Escalation

No description provided by source. Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 4.6.3208 PC 4.5.2.3010 PC Summary: Uplay is a digital distribution, digital rights management,...

Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation

Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 4.6.3208 PC 4.5.2.3010 PC Summary: Uplay is a digital distribution, digital rights management, multiplayer and communications service...

Ubisoft Uplay 4.6 - Insecure File Permissions Local Privilege Escalation

Uplay for PC suffers from an elevation of privileges vulnerability which can be used by a simple user that can change the executable file with a binary of choice. The vulnerability exist due to the improper permissions, with the 'F' flag Full for 'Everyone' group, making the entire directory...

Ubisoft Uplay 4.6 - Insecure File Permissions Privilege Escalation

Ubisoft Uplay 4.6 - Insecure File Permissions Privilege Escalation Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 4.6.3208 PC 4.5.2.3010 PC Summary: Uplay is a digital distribution,...

Ubisoft Uplay 4.6 - Insecure File Permissions Privilege Escalation

Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 4.6.3208 PC 4.5.2.3010 PC Summary: Uplay is a digital distribution, digital rights management, multiplayer and communications service...

Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation

Summary Uplay is a digital distribution, digital rights management, multiplayer and communications service created by Ubisoft to provide an experience similar to the achievements/trophies offered by various other game companies. Description Uplay for PC suffers from an elevation of privileges...

Apple Mac OS X 10 nidump Password File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2953/info A vulnerability exists in all versions of Apple MacOS X. It has been found to contain a vulnerability which could allow disclosure of passwords and other sensitive system information. nidump is a Mac OS X system...

Micro Focus Cobol 4.1 Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2359/info Micro Focus Cobol is a development suite for unix platforms offered by Merant. It is typically licensed on a per-user basis. If Micro Focus Cobol is installed with the 'Apptrack' feature enabled, local users may...

HP HP-UX 10.20/11.0,IBM AIX <= 4.3,SCO Unixware 7.0,Sun Solaris <= 2.6

No description provided by source. source: http://www.securityfocus.com/bid/131/info Due to improper checking of ownership, the dtappgather utility shipped with the Common Desktop Environment allows arbitrary users to overwrite any file present on the filesystem, regardless of the owner of the...

Noah's Classifieds 1.0/1.3 Search Page SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to...

SAMBA 2.0.7 SWAT Symlink Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...