11 matches found
Gentoo Security Advisory GLSA 200506-10 (LutelWall)
The remote host is missing updates announced in advisory GLSA 200506-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200506-10 (LutelWall)
The remote host is missing updates announced in advisory GLSA 200506-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
GLSA-200506-10 : LutelWall: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200506-10 LutelWall: Insecure temporary file creation Eric Romang has discovered that the newversioncheck function in LutelWall insecurely creates a temporary file when updating to a new version. Impact : A local attacker could...
LutelWall: Insecure temporary file creation
Background LutelWall is a high-level Linux firewall configuration tool. Description Eric Romang has discovered that the newversioncheck function in LutelWall insecurely creates a temporary file when updating to a new version. Impact A local attacker could create symbolic links in the temporary fi...
CVE-2005-1879
LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget...
CVE-2005-1879
LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget...
CVE-2005-1879
CVE-2005-1879 concerns LutelWall 0.97 and earlier. The vulnerability allows a local attacker to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. OpenVAS and Gentoo GLSA entries describe an insecure temporary file creation during version updates,...
CVE-2005-1879: Improper Link Resolution Before File Access
LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget...
PT-2005-2836 · Lutelwall · Lutelwall
Name of the Vulnerable Software and Affected Versions: LutelWall versions 0.97 and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. This is a result of a symlink attack vulnerability...
[Full-disclosure] LutelWall <= 0.97 insecure temporary file creation
LutelWall insecure temporary file creation Vendor: http://firewall.lutel.pl/index.php Advisory: http://www.zataz.net/adviso/lutelwall-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...