Debian Security Advisory DSA 2063-1 (pmount)

The remote host is missing an update to pmount announced via advisory DSA 2063-1. OpenVAS Vulnerability Test $Id: deb20631.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2063-1 pmount Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Symlink attack with Solaris Update manager and Sun Patch Cluster

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

Solaris Update manager and Sun Patch Cluster symlink vulnerability

Exploit for solaris platform in category local exploits ================================================================== Solaris Update manager and Sun Patch Cluster symlink vulnerability ================================================================== Symlink attack with Solaris Update manag...

Solaris Update Manager / Sun Patch Cluster Symlink Attack

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities

source: https://www.securityfocus.com/bid/38928/info Sun Connection Update Manager for Solaris creates temporary files in an insecure manner. An attacker with local access could potentially exploit these issues to perform symbolic-link attacks, overwriting arbitrary files in the context of the...

Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities

Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities source: https://www.securityfocus.com/bid/38928/info Sun Connection Update Manager for Solaris creates temporary files in an insecure manner. An attacker with local access could potentially explo...

SuSE9 Security Update : arc (YOU Patch Number 10496)

This updates fixes two bugs : - Eric Romang discovered that the ARC archive program under Unix creates a temporary file with insecure permissions which may lead to an attacker stealing sensitive information. CVE-2005-2945 - Joey Schulze discovered that the temporary file was created in an insecur...

Openswan Insecure File Creation

!/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2...

FreeBSD : MySQL insecure temporary file creation (mysqlbug) (2e129846-8fbb-11d8-8b29-0020ed76ef5a)

Shaun Colley reports that the script mysqlbug' included with MySQL sometimes creates temporary files in an unsafe manner. As a result, an attacker may create a symlink in /tmp so that if another user invokes mysqlbug' and quits without making any changes, an arbitrary file may be overwritten with...

CUPS symbolic links vulnerability

Insecure /tmp/pdf.log file creation...

RedHat Security Advisory RHSA-2009:0003

The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...

RedHat Security Advisory RHSA-2009:0003

The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...

R: Insecure temporary file creation

Background R is a GPL licensed implementation of S, a language and environment for statistical computing and graphics. Description Dmitry E. Oboukhov reported that the "javareconf" script uses temporary files in an insecure manner. Impact A local attacker could exploit this vulnerability to...

IBM AIX 'swcons'不安全文件建立漏洞

BUGTRAQ ID: 30999 CNCAN ID：CNCAN-2008090411 IBM AIX是一款商业性质的操作系统。 IBM AIX 'swcons'不安全建立临时文件，本地攻击者可以利用漏洞以ROOT用户建立任意文件，可导致获得超级用户权限。 要运行'swcons'工具，必须本地用户属于'system'组成员。 IBM AIX 6.1 IBM AIX 5.3 IBM AIX 5.2 可参考如下补丁程序： IBM AIX 6.1 IBM IZ18341 http://www.ibm.com/support/docview.wss?uid=isg1IZ18341 IBM...

Debian Security Advisory DSA 323-1 (noweb)

The remote host is missing an update to noweb announced via advisory DSA 323-1. OpenVAS Vulnerability Test $Id: deb3231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 323-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 292-1 (mime-support)

The remote host is missing an update to mime-support announced via advisory DSA 292-1. OpenVAS Vulnerability Test $Id: deb2921.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 292-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-292-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 292-2 (mime-support)

The remote host is missing an update to mime-support announced via advisory DSA 292-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Debian: Security Advisory (DSA-760-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200801-03 : Claws Mail: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200801-03 Claws Mail: Insecure temporary file creation Nico Golde from Debian reported that the sylprint.pl script that is part of the Claws Mail tools creates temporary files in an insecure manner. Impact : A local attacker could...