openSUSE Security Update : cups (cups-2102)

lppasswd when running setuid or setgid still honors environment variables that specify the location of message files. Local attackers could exploit that to gather information by using crafted format strings CVE-2010-0393. The previous fix for a use-after-free vulnerability CVE-2009-3553 was...

JP1/Cm2/Network Node Manager Remote Console Insecure File Permissions Vulnerability

Overview Computer systems running the JP1/Cm2/Network Node Manager NNM Remote Console for Windows are vulnerable due to insecure file permissions set on the systems. Impact A local attacker could replace the affected files provided by the NNM Remote Console with arbitrary files. Solution Please...

Todd Miller Sudo 'sudoedit' Local Privilege Escalation Vulnerability

Exploit for unknown platform in category local exploits ==================================================================== Todd Miller Sudo 'sudoedit' Local Privilege Escalation Vulnerability ==================================================================== Vulnerable: Ubuntu Ubuntu Linux 9....

Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability

Summary Deimos Kasa is a Windows restaurant management software. Description Deimos Kasa is prone to an integer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input in the table field. Successfully exploiting these issues may allow local attackers to...

Debian DSA-1838-1 : pulseaudio - privilege escalation

Tavis Ormandy and Julien Tinnes discovered that the pulseaudio daemon does not drop privileges before re-executing itself, enabling local attackers to increase their privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

DEBIAN-CVE-2009-4641

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

DEBIAN-CVE-2009-4642

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

Ipswitch IMail Server Multiple Local Privilege Escalation Vulnerabilities

Ipswitch IMail Server is prone to multiple local privilege-escalation vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

GNU Mailman Unspecified Privilege Escalation Vulnerability

Mailman is prone to an unspecified privilege-escalation scripting vulnerability. Few technical details are available at this time. Local attackers may exploit this issue to obtain elevated privileges and compromise a computer. This issue is known to affect Mailman 2.0.2 and 2.0.4; other versions...

GNU Mailman Unspecified Privilege Escalation Vulnerability (Jan 2010)

Mailman is prone to an unspecified privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Kaspersky Products Privilege Escalation Vulnerability

This host is installed with Kaspersky Products and is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: gbkasperskyprdtsprivescalationvulnjan10.nasl 6516 2017-07-04 12:20:47Z cfischer $ Kaspersky Products Privilege Escalation Vulnerability Authors: Nikita MR Copyright:...

Kaspersky Products Privilege Escalation Vulnerability

Kaspersky Products is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Security Advisory MDVSA-2009:046-1 (dia)

The remote host is missing an update to dia announced via advisory MDVSA-2009:046-1. OpenVAS Vulnerability Test $Id: mdksa20090461.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:046-1 dia Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

PHP 5.2.11, 5.3.x < 5.3.1 Multiple Vulnerabilities (Dec 2009)

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

Avast! AntiVirus 4.8.1356 - aswRdr.sys Driver Privilege Escalation

Avast! AntiVirus 4.8.1356 - aswRdr.sys Driver Privilege Escalation // source: https://www.securityfocus.com/bid/37031/info Avast! Antivirus is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges and...

Ubuntu: Security Advisory (USN-841-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-841-1: GLib vulnerability

Arand Nash discovered that applications linked to GLib e.g. Nautilus did not correctly copy symlinks. If a user copied symlinks with GLib, the symlink target files would become world-writable, allowing local attackers to gain access to potentially sensitive information...

SuSE 10 Security Update : Emacs (ZYPP Patch Number 5297)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files. CVE-2008-2142 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5473)

This is a respin of the previous kernel update, which got retracted due to an IDE-CDROM regression, where any IDE CDROM access would hang or crash the system. Only this problem was fixed additionally. This kernel update fixes the following security problems : - On x8664 a denial of service attack...

SuSE9 Security Update : YaST2 (YOU Patch Number 11952)

This update fixes a security bug in yast2-core that allows local attackers to provide malicious YaST2 modules to YaST2 which are subsequently executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. %NASLMINLEVEL 70300 C Tenable...