CVE-2012-0878

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

PYSEC-2012-15

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

PYSEC-2012-15

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

CVE-2012-0878

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

CVE-2012-0878

CVE-2012-0878 affects Paste Script 1.7.5 and earlier. The root cause is improper setting of group memberships during execution with root privileges, which could allow a remote attacker to bypass file-access restrictions when a web application uses the local filesystem. Public details indicate the...

IBM DB2 Multiple Security Bypass Vulnerabilities (May-11)

The host is running IBM DB2 and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multsecbypassvuln.nasl 7585 2017-10-26 15:03:01Z cfischer $ IBM DB2 Multiple Security Bypass Vulnerabilities May-11 Authors: Antu Sanadi Copyright: Copyright c 2011...

IBM Db2 Multiple Security Bypass Vulnerabilities (May 2011)

IBM Db2 is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2";...

Bugzilla Informaton Disclosure Vulnerability

This host is running Bugzilla and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbbugzillainfodisclosurevuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Bugzilla Informaton Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone Networks...

CVE-2010-3716

The beusercreation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships...

CVE-2010-3716

CVE-2010-3716 is a TYPO3 vulnerability where malicious editors with user-creation permission could escalate privileges by creating new users in arbitrary groups due to input validation weakness in the be_user_creation task. Affected: TYPO3 4.2.x pre-4.2.15 and 4.3.x pre-4.3.7. Documented in multi...

CVE-2010-3716

The beusercreation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships...

CVE-2010-2756

Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns...

Design/Logic Flaw

Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns...

CVE-2010-2756

Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns...

CVE-2010-2756

CVE-2010-2756 : Bugzilla's Search.pm exposes group membership information of arbitrary users via the Search interface (including boolean charts and group-based pronouns). Affects Bugzilla versions: 2.19.1–3.2.7, 3.3.1–3.4.7, 3.5.1–3.6.1, and 3.7–3.7.2. This constitutes an information disclosure v...

Mandriva Update for sudo MDVSA-2010:052 (sudo)

Check for the Version of sudo OpenVAS Vulnerability Test Mandriva Update for sudo MDVSA-2010:052 sudo Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Mandriva Update for sudo MDVSA-2010:052 (sudo)

Check for the Version of sudo OpenVAS Vulnerability Test Mandriva Update for sudo MDVSA-2010:052 sudo Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Debian DSA-2006-1 : sudo - several vulnerabilities

Several vulnerabilities have been discovered in sudo, a program designed to allow a sysadmin to give limited root privileges to users. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0426 It was discovered that sudo when a pseudo-command is enabled,...

DSA-2006-1 sudo - several vulnerabilities

Bulletin has no description...

sudo: Fails to reset group permissions if runas_default set

sudo 1.6.x before 1.6.9p21, when the runasdefault option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command...