[ GLSA 201201-04 ] Logsurfer: Arbitrary code execution

Gentoo Linux Security Advisory GLSA 201201-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-201201-07 : NX Server Free Edition, NX Node: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201201-07 NX Server Free Edition, NX Node: Privilege escalation NX Server Free Edition and NX Node use nxconfigure.sh, a setuid script containing an unspecified vulnerability. Impact : A local attacker could gain escalated...

GLSA-201201-11 : Firewall Builder: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201201-11 Firewall Builder: Privilege escalation Two vulnerabilities in Firewall Builder allow the iptables and fwbinstall scripts to use temporary files insecurely. Impact : A local attacker could possibly overwrite arbitrary fil...

PT-2012-1112

Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8s and 1.0.0f OpenSSL versions prior to 1.0.0g Description The issue affects the OpenSSL package in Gentoo Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information...

[ GLSA 201111-03 ] OpenTTD: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 201111-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Adobe Flash Player CVE-2011-2452 Remote Memory Corruption Vulnerability

Description Adobe Flash Player is prone to an unspecified remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions...

[ GLSA 201110-23 ] Apache mod_authnz_external: SQL injection

Gentoo Linux Security Advisory GLSA 201110-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-201110-24 : Squid: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-24 Squid: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Squid. Please review the CVE identifiers referenced below for details. Impact : Remote unauthenticated attackers may be able to execute...

GLSA-201110-18 : rgmanager: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201110-18 rgmanager: Privilege escalation A vulnerability has been discovered in rgmanager. Please review the CVE identifier referenced below for details. Impact : A local attacker could gain escalated privileges. Workaround : The...

[ GLSA 201110-09 ] Conky: Privilege escalation

Gentoo Linux Security Advisory GLSA 201110-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 201110-08 ] feh: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 201110-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

PT-2011-1200

Name of the Vulnerable Software and Affected Versions groff versions prior to 1.22.2 Description The issue affects the groff package in Gentoo Linux, potentially leading to integrity and availability breaches of protected information. Exploitation can be done remotely. Specifically, in GNU troff...

PT-2011-1199

Name of the Vulnerable Software and Affected Versions groff versions prior to 1.22.2 Description The issue affects the groff package in Gentoo Linux and concerns multiple vulnerabilities that can be exploited remotely, potentially leading to a breach of data integrity and availability...

PT-2011-1189

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.0j OpenSSL versions prior to 0.9.8y Description The issue affects the OpenSSL package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information...

OpenSSL leaks ECDSA private key through a remote timing attack

Overview The OpenSSL ladder implementation for scalar multiplication of points on elliptic curves over binary fields is susceptible to a timing attack vulnerability. This vulnerability can be used to steal the private key of a TLS server that authenticates with ECDSA signatures and binary curves...

PT-2011-1195

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.15-r3 Description The issue affects the glibc package in Gentoo Linux, potentially compromising the confidentiality, integrity, and availability of protected information. Exploitation of the vulnerabilities can be...

CVE-2011-1549

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by...

Default configuration

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by...

CVE-2011-1549

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by...

CVE-2011-1549

The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of support for untrusted directories, as demonstrated by...