[SECURITY] [DSA 761-1] New heartbeat packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 761-1 [email protected] http://www.debian.org/security/ Martin Schulze July 19th, 2005 http://www.debian.org/security/faq -...

Debian DSA-761-2 : heartbeat - insecure temporary files

The security update DSA 761-1 for heartbeat contained a bug which caused a regression. This problem is corrected with this advisory. For completeness below please find the original advisory text : Eric Romang discovered several insecure temporary file creations in heartbeat, the subsystem for...

DSA-761-2 heartbeat - insecure temporary files

Bulletin has no description...

[SA16039] Heartbeat Multiple Insecure Temporary File Creation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Heartbeat symbolic links problem

Smlink problems on temporary files creation in different code fragments...

CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2231

The CVE-2005-2231 issue affects Heartbeat (High Availability Linux) 1.2.3, where a symlink attack on temporary files allows local users to overwrite arbitrary files. This is a local-privilege concern with incomplete impact (I:P; C:N; A:N) as documented. Debian advisories note the fix to version 1...

CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2231: Undefined Security Weakness

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

heartbeat -- insecure temporary file creation vulnerability

Eric Romang reports a temporary file creation vulnerability within heartbeat. The vulnerability is caused by hardcoded temporary file usage. This can cause an attacker to create an arbitrary symlink causing the application to overwrite the symlinked file with the permissions of the user executing...

CVE-2004-0978

Heap-based buffer overflow in the Hrtbeat.ocx Heartbeat ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter...

MSN Heartbeat Control Buffer Overflow

NGSSoftware Insight Security Research Advisory Name: MSN Heartbeat Control Buffer Overflow Systems Affected: Microsoft Internet Explorer with the MSN Heartbeat Control Severity: High Vendor URL: http://zone.msn.com/ Author: John Heasman [email protected] Date of Public Advisory: 19th January...

MSN Gaming Heartbeat Component Buffer Overflow

John Heasman of NGSSoftware has discovered a high risk vulnerability in the Heartbeat component used on MSN related gaming sites. This vulnerability has now been fixed by Microsoft, and a fix can be downloaded from the Microsoft Security website:...

Microsoft Internet Explorer Heartbeat ActiveX Control Unspecified Vulnerability

Description An unspecified vulnerability exists in the Microsoft Internet Explorer Heartbeat MSN gaming ActiveX control Hrtbeat.ocx. Technologies Affected Avaya DefinityOne Media Servers Avaya IP600 Media Servers Avaya Modular Messaging MSS 1.1.0 Avaya Modular Messaging MSS 2.0.0 Avaya S3400...

Debian DSA-174-1 : heartbeat - buffer overflow

Nathan Wallwork discovered a buffer overflow in heartbeat, a subsystem for High-Availability Linux. A remote attacker could send a specially crafted UDP packet that overflows a buffer, leaving heartbeat to execute arbitrary code as root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SUSE-SA:2002:037: heartbeat

The remote host is missing the patch for the advisory SUSE-SA:2002:037 heartbeat. Heartbeat is a monitoring service that is used to implement failover in high-availablity environments. It can be configured to monitor other systems via serial connections, or via UDP/IP. Several format string bugs...

CVE-2002-1215

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...

CVE-2002-1215

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier claimed as buffer overflows in some sources allow remote attackers to execute arbitrary code via certain packets to UDP port 694 incorrectly claimed as TCP in some sources...