SLES10: Security update for poppler

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for dbus

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: dbus-1 dbus-1-devel dbus-1-glib dbus-1-gtk dbus-1-java dbus-1-mono dbus-1-python dbus-1-qt3 dbus-1-qt3-devel dbus-1-x11 More details may also be found by...

SLES10: Security update for poppler

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: poppler poppler-glib poppler-qt More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for NetworkManager

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: NetworkManager NetworkManager-devel NetworkManager-glib More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked i...

SLES11: Security update for NetworkManager

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: NetworkManager NetworkManager-glib More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

USN-841-1: GLib vulnerability

Arand Nash discovered that applications linked to GLib e.g. Nautilus did not correctly copy symlinks. If a user copied symlinks with GLib, the symlink target files would become world-writable, allowing local attackers to gain access to potentially sensitive information...

glib library privilege escalation

gfilecopy function sets symbolic link's permission if source file is copied by symbolic link...

GNOME glib库g_file_copy函数不安全文件权限设置漏洞

CVE ID: CVE-2009-3289 GLib是GTK+和GNOME工程的基础底层核心程序库，是一个综合用途的轻量级的C程序库。 glib库gfilecopy函数将目标文件的权限设置为了符号链接的权限（777），这允许本地用户修改其他用户的文件。 GNOME glib 2.0 厂商补丁： GNOME ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.gnome.org/...

Directory traversal

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

DEBIAN-CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

CVE-2009-3289 affects glib2.0: the g_file_copy function sets the target file permissions to 0777 when copying symbolic links, enabling user-assisted local modification of other users’ files. Affected software is glib2.0 (glib 2.0); several OS advisories reference fixes bundled with glib2 updates ...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

PT-2009-5602 · Glib +1 · Glib +1

Name of the Vulnerable Software and Affected Versions: glib version 2.0 Description: The issue allows user-assisted local users to modify files of other users. This is demonstrated by using Nautilus to modify the permissions of the user home directory. The g file copy function sets the permission...

GNOME glib符号链接任意文件访问漏洞

Bugraq ID: 36313 GLib是一款GTK+和GNOME工程的基础底层核心程序库，是综合用途的轻量级的C程序库。 GNOME glib存在竞争条件问题，可导致任意文件访问或覆盖系统文件。 1，针对想要更改权限的文件或文件夹建立一个符号链接touch /testfile && ln -s /testfile /testlink。 2，使用Nautilus拷贝符号链接到任意地方ctrl+c && ctrl+v。 3，检查符号连接的文件或文件夹的权限。 结果可导致符号连接的文件或文件夹的权限已更改为777drwxrwxrwx user:user。 GNOME glib 2.16.4...

openSUSE Security Update : libpoppler-devel (libpoppler-devel-77)

This update fixes an code execution bug. CVE-2008-2950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpoppler-devel-77. The text description of this plugin is C SUSE LLC...

[SECURITY] Fedora 10 Update: glib2-2.18.4-2.fc10

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system. This package provides versi...