[SECURITY] [DSA 283-1] New xfsdump packages fix insecure file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 283-1 [email protected] http://www.debian.org/security/ Martin Schulze April 11th, 2003 http://www.debian.org/security/faq -...

DSA-283 xfsdump - insecure file creation

Bulletin has no description...

Multiple vulnerabilities in AutomatedShops WebC shopping cart

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Vulnerability Advisory Product: WebC shopping cart Versions: 2.011 - 5.005 Vulnerable to all exploits 5.010 vulnerable to local exploit Vendor: Automated Shops http://www.automatedshops.com Platforms: Linux/FreeBSD/Win32 Impact: Remote code...

CVE-2001-1059

VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information...

SimpleBBS 1.0.6 - 'users.php' Insecure File Permissions

source: https://www.securityfocus.com/bid/7045/info SimpleBBS reportedly creates sensitive files with world-readable permissions. As a result anyone who has access to SimpleBBS web resources may access confidential information stored in the SimpleBBS user database. This vulnerability was reported...

SimpleBBS 1.0.6 - users.php Insecure File Permissions

SimpleBBS 1.0.6 - users.php Insecure File Permissions source: https://www.securityfocus.com/bid/7045/info SimpleBBS reportedly creates sensitive files with world-readable permissions. As a result anyone who has access to SimpleBBS web resources may access confidential information stored in the...

[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 188-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 188-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2002 http://www.debian.org/security/faq -...

DSA-188 apache-ssl - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 160-1] New scrollkeeper packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 160-1 [email protected] http://www.debian.org/security/ Martin Schulze September 3rd, 2002 http://www.debian.org/security/faq -...

DSA-160 scrollkeeper - insecure temporary file creation

Bulletin has no description...

FreeBSD-SA-02:23.stdio

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:23.stdio Security Advisory The FreeBSD Project Topic: insecure handling of stdio file descriptors Category: core Module: kernel Announced: 2002-04-22 Credits: Joost Pol ,...

CVE-2002-0103

An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by 1 running webcached or 2 obtaining the administrator password from webcache.xml...

SCO UnixWare 7.1.X

Well.. Looks like a insecure file vuln exsists within the system created file when you do the initial install of SCO. Lets take a look here at /var/adm/isl/ifile [email protected] ls -l /var/adm/isl/ifile -rw-r--r-- 1 root root 4691 Sep 24 1999 /var/adm/isl/ifile And we all know the shadow file ...

cdrdao insecure filehandling

-- Description -- There are several security-related Bugs in the distributed Debian SID Package of CDRDAO, a program to write audio or mixed mode CD-Rs in disk-at-once mode. /usr/bin/cdrdao is setuid-Root by default. -- Version -- Name: Cdrdao Version: 1.1.5 Autor: Andreas Mueller [email protected]...

nwclient -- multiple vulnerabilities

Insecure file permissions, network access control and DNS usage put systems that use Legato NetWorker at risk. When the software is running, several files that contain sensitive information are created with insecure permissions. The information exposed include passwords and can therefore be used...

CVE-2001-0481

Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling...

CVE-1999-1126

Cisco Resource Manager (CRM) 1.1 and earlier stores sensitive configuration data in files with insecure permissions, enabling local users to read usernames, passwords, and SNMP community strings from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files beginning with D...

Wvdial insecure conf?

I've compiled and installed wvdial a dialer for dial up connection and the program wvdialconf generate a file called wvdial.conf. In this file : AT strings, username, pass and another setting like /etc/ppp/options. But now the problem, with ls -l -rw-r--r-- 1 root root 335 Aug 1 18:21 wvdial.conf...

Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation (2)

Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation 2 source: https://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image...