Mandriva Update for ncpfs MDVSA-2010:061 (ncpfs)

Check for the Version of ncpfs OpenVAS Vulnerability Test Mandriva Update for ncpfs MDVSA-2010:061 ncpfs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Code injection

The 1 ncpmount, 2 ncpumount, and 3 ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service application failure via unspecified vectors that trigger the creation of a /etc/mtab file that persists after the program exits...

CVE-2010-0791

The 1 ncpmount, 2 ncpumount, and 3 ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service application failure via unspecified vectors that trigger the creation of a /etc/mtab file that persists after the program exits...

SuSE 10 Security Update : Emacs (ZYPP Patch Number 5248)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files. CVE-2008-2142 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

openSUSE 10 Security Update : emacs (emacs-5247)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files CVE-2008-2142. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : xemacs-packages (xemacs-packages-5249)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files CVE-2008-2142. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

DEBIAN-CVE-2008-2142

Emacs 21 and XEmacs automatically load and execute .flc fast lock files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code...

Debian Security Advisory DSA 008-1 (dialog)

The remote host is missing an update to dialog announced via advisory DSA 008-1. OpenVAS Vulnerability Test $Id: deb0081.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 008-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Integer overflow

Rejected reason: The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files aka "time-of-check-time-of-use file race". NOTE: the researcher has retracted the original advisory, stating that "th...

CVE-2007-2056

Rejected reason: The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files aka "time-of-check-time-of-use file race". NOTE: the researcher has retracted the original advisory, stating that "th...

security flaw

kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files...

CVE-2005-2494

kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files...

CVE-2005-2494

kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files...

CVE-2002-0795

The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files...

FreeBSD-SA-02:27.rc

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:27.rc Security Advisory The FreeBSD Project Topic: rc uses file globbing dangerously Category: core Module: rc Announced: 2002-05-29 Credits: lumpy Affects: FreeBSD...

CVE-2000-1198

CVE-2000-1198 affects the qpopper POP server. The vulnerability arises from lock files being created with predictable names, enabling a local attacker to cause a denial of service for other users by creating lock files for other mail boxes. The available connected documents describe the issue and...

CVE-2000-1197

CVE-2000-1197 affects POP2/POP3 server (pop3d) in the imap-uw IMAP package on FreeBSD and other OSes. The vulnerability arises from the server creating lock files with predictable names, enabling local users to cause a denial of service by locking other users’ mail boxes (no exploitation details ...

CVE-2000-1197

POP2 or POP3 server pop3d in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service lack of mail access for other users by creating lock files for other mail boxes...

CVE-2000-1198

qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users lack of mail access by creating lock files for other mail boxes...

CVE-2000-1197

POP2 or POP3 server pop3d in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service lack of mail access for other users by creating lock files for other mail boxes...