1427 matches found
D-Bus symbolic links vulnerability
configure script insecure file creation...
GLSA-201110-09 : Conky: Privilege escalation
The remote host is affected by the vulnerability described in GLSA-201110-09 Conky: Privilege escalation A privilege escalation vulnerability due to an insecure temporary file was found in Conky. Impact : A local attacker could possibly overwrite arbitrary files with the privileges of the user...
CentOS Update for bash CESA-2011:1073 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for bash CESA-2011:1073 centos5 i386
Check for the Version of bash OpenVAS Vulnerability Test CentOS Update for bash CESA-2011:1073 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Oracle Java Runtime Environment Insecure File Loading
Added: 08/08/2011 OSVDB: 74330 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java application; it consists of the Java...
Oracle Java Runtime Environment Insecure File Loading
Added: 08/08/2011 OSVDB: 74330 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The Java Runtime Environment provides the minimum requirements for executing a Java application; it consists of the Java...
Oracle Java Runtime Environment Insecure File Loading
A code execution vulnerability has been reported in Oracle's Java Runtime Environment. The vulnerability is due to a design flaw in the way that Java Runtime Environment loads configuration files. Attackers can exploit this vulnerability to set JVM options. Successful exploitation of this...
Cisco Security Agent Management Center Code Execution
Added: 03/17/2011 CVE: CVE-2011-0364 BID: 65436 OSVDB: 70884 Background Cisco Security Agent Management Center is the server component of Cisco's Security Agent endpoint IPS solution. It is responsible for collecting event log information from endpoints and distributing rules updates. Problem The...
Low: Red Hat Security Advisory: bash security and bug fix update
Updated bash packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
SA-CONTRIB-2011-003 - Janrain Engage (RPX) - Multiple Vulnerabilities
RPX recently renamed Janrain Engage is a service that acts as a middleman between a site and external login providers like Facebook, Yahoo, WindowsLive, etc. As part of this functionality it offers the ability to take a user's avatar on these services and download it for use as the user's profile...
Intel® C++ Compiler and Intel® Fortran Compiler Insecure File Permission Local Privilege Escalation Vulnerability
Summary: Updated software is available for the customers using Intel® C++ Compiler Professional Edition for Linux and Intel® Fortran Compiler Professional Edition for Linux to mitigate a local privilege escalation vulnerability which could potentially be triggered during the compilation process...
Fedora 14 : dracut-006-5.fc14 / udev-161-7.fc14 (2010-17930)
It was discovered that /dev/systty device file created by dracut-generated initramfs scripts used an insecure file permissions. This could possibly allow local user to snoop on other user's terminal. Updated dracut no longer creates this file as device file, rather creates it a symbolic link to...
CVE-2010-1768
Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch...
Design/Logic Flaw
Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch...
CVE-2010-1768
Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch...
Design/Logic Flaw
The Citibank Citi Mobile app before 2.0.3 for iOS stores account data in a file, which allows local users to obtain sensitive information via vectors involving 1 the mobile device or 2 a synchronized computer...
Intel® Math Kernel Library Insecure File Permission Local Privilege Escalation
Summary: The Intel® Math Kernel Library Intel® MKL is a library of highly optimized, extensively threaded math routines for science, engineering, and financial applications that require maximum performance. An updated version of the software is available for Intel® MKL users to mitigate this...
Oracle Solaris - 'nfslogd' Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/41637/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service...
Debian Security Advisory DSA 2063-1 (pmount)
The remote host is missing an update to pmount announced via advisory DSA 2063-1. OpenVAS Vulnerability Test $Id: deb20631.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2063-1 pmount Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...