1428 matches found
RedHat Security Advisory RHSA-2009:1154
The remote host is missing updates announced in advisory RHSA-2009:1154. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address...
RedHat Security Advisory RHSA-2009:1154
The remote host is missing updates announced in advisory RHSA-2009:1154. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address...
Openswan Insecure File Creation
!/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2...
Fedora Core 10 FEDORA-2009-5368 (coccinelle)
The remote host is missing an update to coccinelle announced via advisory FEDORA-2009-5368. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
FreeBSD : MySQL insecure temporary file creation (mysqlbug) (2e129846-8fbb-11d8-8b29-0020ed76ef5a)
Shaun Colley reports that the script mysqlbug' included with MySQL sometimes creates temporary files in an unsafe manner. As a result, an attacker may create a symlink in /tmp so that if another user invokes mysqlbug' and quits without making any changes, an arbitrary file may be overwritten with...
IBM WebSphere Application Server 7.0 < Fix Pack 3
IBM WebSphere Application Server 7.0 before Fix Pack 3 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - Under certain conditions it may be possible to access administrative console user sessions. PK74966 - The administrative console is...
[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA-1767-1 [email protected] http://www.debian.org/security/ Nico Golde April 9th, 2009 http://www.debian.org/security/faq -...
Gentoo Security Advisory GLSA 200903-24 (shadow)
The remote host is missing updates announced in advisory GLSA 200903-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
RedHat Update for bind RHSA-2008:0300-02
Check for the Version of bind OpenVAS Vulnerability Test RedHat Update for bind RHSA-2008:0300-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
CVE-2009-0011
Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file...
Design/Logic Flaw
Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file...
CVE-2009-0011
Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file...
CUPS symbolic links vulnerability
Insecure /tmp/pdf.log file creation...
MKPortal <= 1.2.1 () Multiple Remote Vulnerabilities
No description provided by source. waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind "waraxe" Date: 15. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-70.html...
MKPortal <= 1.2.1 () Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ==================================================== MKPortal = 1.2.1 Multiple Remote Vulnerabilities ==================================================== waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1...
MKPortal 1.2.1 - Multiple Vulnerabilities
MKPortal 1.2.1 - Multiple Vulnerabilities waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind "waraxe" Date: 15. January 2009 Location: Estonia, Tartu Web:...
MKPortal 1.2.1 - Multiple Vulnerabilities
waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind "waraxe" Date: 15. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-70.html Description of vulnerable software...
FreeBSD : verlihub -- insecure temporary file usage and arbitrary command execution (58997463-e012-11dd-a765-0030843d3802)
securityfocus reports : An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files,...
RedHat Security Advisory RHSA-2009:0003
The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...
RedHat Security Advisory RHSA-2009:0003
The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...