[SECURITY] [DSA 1648-1] New mon packages fix insecure temporary files

------------------------------------------------------------------------ Debian Security Advisory DSA-1648-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 08, 2008 http://www.debian.org/security/faq -...

Arbitrary file deletion

alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file...

DSA-1648-1 mon - insecure temporary files

Bulletin has no description...

Debian: Security Advisory (DSA-1648-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4477

The CVE pertains to the mon daemon (version 0.99.2) where the test.alert script creates insecure temporary files, allowing a local user to overwrite arbitrary files via a symlink attack on test.alert.log. This results in a local denial of service. Public details indicate the issue is fixed in Deb...

CVE-2008-4477

alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file...

Fedora 7 : boost-1.33.1-15.fc7 (2008-0880)

Wed Jan 16 2008 Petr Machata - 1.33.1-15 - Fixes for boost.regex. - Mon Nov 19 2007 Petr Machata - 1.33.1-14 - Apply/testsuite ambiguous option patch from James Philbin - Resolves: 369581 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Apple Mac OSX xnu 1228.0 - 'super_blob' Local kernel Denial of Service (PoC)

/ xnu-superblob-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define CSSLOTCODEDIRECTORY 0x0 define CSMAGICCODEDIRECTORY 0xfade0c02 / CodeDirectory blob /...

CVE-2006-0573

Multiple cross-site scripting XSS vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to a editquota.html or b dodelpop.html; 2 showtree parameter to c diskusage.html; or the 3 mon, 4 year, 5 target, or 6 domain parameter ...