86 matches found
[SECURITY] Fedora 27 Update: coreutils-8.27-19.fc27
These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...
[SECURITY] Fedora 26 Update: coreutils-8.27-5.fc26
These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...
The vulnerability of the Red Hat Linux operating system allows attackers to compromise the integrity of protected information.
The vulnerability of the fileutils-4.0 package of the Red Hat Linux operating system can lead to the compromise of protected information. Exploiting this vulnerability can be carried out locally...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
The fileutils-4.1.9 package of the Red Hat Linux operating system has multiple vulnerabilities that, if exploited, may lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
The vulnerability of the Red Hat Linux operating system allows attackers to compromise the integrity of protected information.
The vulnerability of the fileutils-4.0x-3.1 package of the Red Hat Linux operating system can lead to the compromise of protected information. This vulnerability can be exploited locally...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
The fileutils-4.1 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
The fileutils-4.0.36 package of the Red Hat Linux operating system has multiple vulnerabilities that, if exploited, may compromise the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Oracle Linux 6 : ruby (ELSA-2011-0910)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0910 advisory. - Address CVE-2011-1004 'Symlink race condition by removing directory trees in fileutils module' ruby-1.8.7-CVE-2011-1004.patch - Address CVE-2011-1005...
Fileutils Ruby Gem Remote Command Execution Vulnerability
The Fileutils Ruby gem suffers from possible remote command execution due to a lack of passing unsanitized user input to CutyCapt for execution. It also suffers from insecure file handling in /tmp. Possible remote command execution and insecure file handling in /tmp. 2/23/2013...
RedHat Update for ruby RHSA-2011:0910-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-2649
Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call...
PT-2011-3998
Name of the Vulnerable Software and Affected Versions Kiwi versions prior to 3.74.2 SUSE Studio versions prior to 1.1.4 Description The issue allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call. Recommendations For Kiwi versions prior ...
CVE-2011-2649: Improper Input Validation
Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call...
RHEL 5 : ruby (RHSA-2011:0909)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0909 advisory. - ruby WEBrick log escape sequence CVE-2009-4492 - Ruby WEBrick javascript injection flaw CVE-2010-0541 - ruby: memory corruption in...
Ruby: Symlink race condition by removing directory trees in fileutils module
The FileUtils.removeentrysecure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack...
Mandriva Update for ruby MDVSA-2011:097 (ruby)
Check for the Version of ruby OpenVAS Vulnerability Test Mandriva Update for ruby MDVSA-2011:097 ruby Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
[ MDVSA-2011:097 ] ruby
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:097 http://www.mandriva.com/security/ Package : ruby Date : May 23, 2011 Affected: 2009.0, 2010.1, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities have been identified and fixed in ruby:...
Ruby 'FileUtils.remove_entry_secure()' Method Race Condition Vulnerability
Ruby is prone to race condition vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ruby-lang:ruby"; ifdescription...
CVE-2011-1004
The FileUtils.removeentrysecure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack...
Authorization
The FileUtils.removeentrysecure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack...