X Font Server: Multiple Vulnerabilities

Background The X.Org X11 X Font Server provides a standard mechanism for an X server to communicate with a font renderer. Description iDefense reported that the xfs init script does not correctly handle a race condition when setting permissions of a temporary file CVE-2007-3103. Sean Larsson...

Vba32 Personal Antivirus不安全文件权限本地特权提升漏洞

Vba32 Personal Antivirus是一款反病毒应用程序。 Vba32 Personal Antivirus 不安全设置目录文件权限，本地攻击者可以利用漏洞提升特权。 由于默认的安装目录设置全局可写，因此通过删除，操作和替代应用程序文件可导致特权提升。 VirusBlokAda Vba32 Personal 3.12.2 VirusBlokAda VBA32 升级到最新程序： http://www.anti-virus.by/en/personal.html...

GLSA-200709-11 : GDM: Local Denial of Service

The remote host is affected by the vulnerability described in GLSA-200709-11 GDM: Local Denial of Service The result of a gstrsplit call is incorrectly parsed in the files daemon/gdm.c, daemon/gdmconfig.c, gui/gdmconfig.c and gui/gdmflexiserver.c, allowing for a NULL pointer dereference. Impact :...

CVE-2007-0004

The NFS client implementation in the kernel in Red Hat Enterprise Linux RHEL 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfspermission mode bits data rather than an NFS ACCESS call to the server, which allows local client processes to...

CVE-2007-0004

The CVE-2007-0004 entry concerns the Linux kernel NFS client (RHEL 3). When an NFS filesystem is mounted with noacl, the open system call permissions are checked using vfs_permission (mode bits) data instead of an NFS ACCESS query to the server. This can allow local client processes to receive a ...

Design/Logic Flaw

JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...

Moderate: aide security update

0.13.1-2.0.4 - Added the correct new config file Related: rhbz252331 0.13.1-2.0.3 - Fixed file permissions to please release criteria Related: rhbz252331 0.13.1-2.0.2 - Removed saved copies of patched scripts Related: rhbz252331 0.13.1-2 - Fixed a typo Related: rhbz252331 0.13.1-1 - Rebased to...

[Full-disclosure] Multiple eScan products insecure file permissions

========================================================================= Team Intell Security Advisory TISA2007-13-Public ------------------------------------------------------------------------- Multiple eScan products insecure file permissions...

Microworld eScan (Multiple Products) - Local Privilege Escalation

Microworld eScan Multiple Products - Local Privilege Escalation source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to...

Microworld eScan (Multiple Products) - Local Privilege Escalation

source: https://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful...

Code injection

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying 1 disclaimer.txt, 2 sponsors.txt, and 3 banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend...

CVE-2007-4536

TorrentTrader 1.07 and earlier is affected by an insecure file-permissions flaw in the root directory. Attackers can modify files used by an include call (disclaimer.txt, sponsors.txt, banners.txt) to execute arbitrary PHP code. The vulnerability is localized (LOCAL attack vector) with partial co...

[ GLSA 200708-14 ] NVIDIA drivers: Denial of Service

Gentoo Linux Security Advisory GLSA 200708-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

NVIDIA drivers: Denial of service

Background The NVIDIA drivers provide support for NVIDIA graphic boards. Description Gregory Shikhman discovered that the default Gentoo setup of NVIDIA drivers creates the /dev/nvidia with insecure file permissions. Impact A local attacker could send arbitrary values into the devices, possibly...

Cisco Security Advisory: Local Privilege Escalation Vulnerabilities in Cisco VPN Client

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Local Privilege Escalation Vulnerabilities in Cisco VPN Client Advisory ID: cisco-sa-20070815-vpnclient http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml Revision 1.0 For Public Release 2007 August 15 1600...

Kaspersky Anti-Spam不安全文件权限漏洞

BUGTRAQ ID: 25189 Kaspersky Anti-Spam是卡巴斯基杀毒产品中的反垃圾邮件组件。 Kaspersky Anti-Spam在处理文件的访问权限时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 如果使用修改过的应用程序文件软件包将应用程序组件的文件从之前版本升级到新版的话，就会对文件设置不安全的访问权限，允许本地攻击者获得非授权访问。 Kaspersky Labs Kaspersky Anti-Spam 3.0 MP1 CF1 3.0.274.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

DSA-1342-1 xfs

Bulletin has no description...

Symantec Discovery Insecure File Permissions

SUMMARY Insecure default directory and file permissions may allow local users to gain escalated privileges. Severity Low Remote Access | Local network access required ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Affected Products Produ...

CVE-2007-3103

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file...

Design/Logic Flaw

The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file...