Code injection

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...

CVE-2009-0032

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...

CVE-2009-0032

CVE-2009-0032 affects CUPS shipped with Mandriva Linux (2008.0, 2008.1, 2009.0) and Mandriva CS/MNF; a local symlink attack on the /tmp/pdf.log file lets local users overwrite arbitrary files. Root cause: insecure handling of temporary file creation via symlinks in CUPS. Impact: local privilege/e...

[ MDVSA-2009:011 ] virtualbox

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:011 http://www.mandriva.com/security/ Package : virtualbox Date : January 14, 2009 Affected: 2008.0, 2008.1, 2009.0 Problem Description: A vulnerability have been discovered and corrected in VirtualBox,...

[ MDVSA-2008:246 ] kernel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:246 http://www.mandriva.com/security/ Package : kernel Date : December 29, 2008 Affected: 2009.0 Problem Description: Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: The chipcomma...

[ MDVSA-2008:242 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:242 http://www.mandriva.com/security/ Package : wireshark Date : December 15, 2008 Affected: 2008.1, 2009.0, Corporate 4.0 Problem Description: Two vulnerabilities were discovered in Wireshark. The first is ...

[ MDVSA-2008:209 ] pam_krb5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:209 http://www.mandriva.com/security/ Package : pamkrb5 Date : October 3, 2008 Affected: 2007.1, 2008.0, 2008.1 Problem Description: St©phane Bertin discovered a flaw in the pamkrb5 existingticket...

[ MDVSA-2008:198 ] R-base

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:198 http://www.mandriva.com/security/ Package : R-base Date : September 16, 2008 Affected: 2008.0, 2008.1 Problem Description: A symlink vulnerability was found in the javareconf script in R that allows loca...

[ MDVSA-2008:185 ] python-django

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:185 http://www.mandriva.com/security/ Package : python-django Date : September 3, 2008 Affected: 2007.1, 2008.0, 2008.1 Problem Description: A cross-site request forgery vulnerability was discovered in Djang...

[ MDVSA-2008:184 ] libtiff

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:184 http://www.mandriva.com/security/ Package : libtiff Date : September 3, 2008 Affected: 2007.1, 2008.0, 2008.1, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Drew Yaro of t...

[email protected]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:181 http://www.mandriva.com/security/ Package : ipsec-tools Date : August 28, 2008 Affected: 2007.1, 2008.0, 2008.1, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Two denial of service...

[ MDVSA-2008:175 ] yelp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:175 http://www.mandriva.com/security/ Package : yelp Date : August 20, 2008 Affected: 2008.0, 2008.1 Problem Description: A format string vulnerability was discovered in yelp after version 2.19.90 and before...

QEMU安全绕过漏洞

BUGTRAQ ID: 30604 CVE ID：CVE-2008-1945 CNCVE ID：CNCVE-20081945 QEMU是一款面向完整PC系统的开源仿真器。 QEMU不正确限制对部分功能的访问，本地攻击者可以利用漏洞绕过安全限制，执行未授权攻击。 QEMU没有正确处理针对可移动媒介的更改，允许客户操作系统用户通过使用diskformat读取宿主OS上的任意文件。通过在-usbdevice选项的参数可修改磁盘映像头字段数据而识别为不同的格式来读取文件。 MandrakeSoft Linux Mandrake 2008.1 x8664 MandrakeSoft Linux...

[ MDVSA-2008:147 ] - Updated pcre packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:147 http://www.mandriva.com/security/ Package : pcre Date : July 15, 2008 Affected: 2007.1, 2008.0, 2008.1 Problem Description: Tavis Ormandy of the Google Security Team discovered a heap-based buffer overfl...

[ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:087 http://www.mandriva.com/security/ Package : policykit Date : April 16, 2008 Affected: 2008.1 Problem Description: A format string vulnerability in the grant helper, in PolicyKit 0.7 and earlier, allows...

[ MDVSA-2008:083 ] - Updated audit packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:083 http://www.mandriva.com/security/ Package : audit Date : April 9, 2008 Affected: 2008.0, 2008.1 Problem Description: Joe Nall reported a stack-based buffer overflow in Audit's log handling that could all...

[ MDVSA-2008:064 ] - Updated tomboy packages fix improper LD_LIBRARY_PATH handling

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:064 http://www.mandriva.com/security/ Package : tomboy Date : March 7, 2008 Affected: 2007.1, 2008.0 Problem Description: A flaw in how tomboy handles LDLIBRARYPATH was discovered where by appending paths to...

[ MDVSA-2008:050 ] - Updated cups packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:050 http://www.mandriva.com/security/ Package : cups Date : February 26, 2008 Affected: Corporate 3.0 Problem Description: Dave Camp at Critical Path Software discovered a buffer overflow in CUPS 1.1.23 and...

[ MDVSA-2008:027 ] - Updated pulseaudio packages fix local root vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:027 http://www.mandriva.com/security/ Package : pulseaudio Date : January 25, 2008 Affected: 2007.1, 2008.0 Problem Description: A programming flaw was found in Pulseaudio versions older than 0.9.9, by which...

[ MDVSA-2008:026 ] - Updated icu packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:026 http://www.mandriva.com/security/ Package : icu Date : January 25, 2008 Affected: 2008.0 Problem Description: Will Drewry reported multiple flaws in how libicu processed certain malformed regular...