Ubuntu: Security Advisory (USN-636-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for shadow vulnerability USN-695-1

Ubuntu Update for Linux kernel vulnerabilities USN-695-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6951.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for shadow vulnerability USN-695-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Code injection

Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pamsetcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, a...

CVE-2009-0361

Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pamsetcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, a...

CVE-2009-0361

Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pamsetcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, a...

dovecot security and bug fix update

1.0.7-7 - permissions of deliver and dovecot.conf from 1.0.7-5 reverted - password can be stored in different file readable only for root now - Resolves: 436287, CVE-2008-4870 1.0.7-6 - added missing directory in file list - Resolves: 436287 1.0.7-5 - change permissions of deliver and dovecot.con...

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

Design/Logic Flaw

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

CVE-2009-0122

CVE-2009-0122 affects HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu. The vulnerability lies in hplip.postinst, where local users can change the ownership of arbitrary files through manipulations performed before an HPLIP installation or upgrade by an administrator. This is relat...

Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC

No description provided by source. !/bin/bash - echo ' include string.h include stdlib.h include unistd.h include utmp.h include sys/types.h include stdio.h int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0;...

Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC

Exploit for linux platform in category local exploits ======================================================================= Debian GNU/Linux symlink attack in login Arbitrary File Ownership PoC ======================================================================= !/bin/bash - echo ' include...

Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC

No description provided by source. !/bin/bash - echo ' include string.h include stdlib.h include unistd.h include utmp.h include sys/types.h include stdio.h int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0;...

Debian - Symlink In Login Arbitrary File Ownership

!/bin/bash - echo ' include include include include include include int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0; strcpyentry.utuser,"badguy"; strcpyentry.uthost,"badhost"; entry.utaddr=0; fori=1;i /tmp/fillutmp.c cc ...

Debian - Symlink In Login Arbitrary File Ownership

Debian - Symlink In Login Arbitrary File Ownership !/bin/bash - echo ' include include include include include include int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0; strcpyentry.utuser,"badguy";...

condor: users can run jobs with arbitrary owners

Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors...

Gentoo Security Advisory GLSA 200808-12 (postfix)

The remote host is missing updates announced in advisory GLSA 200808-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200411-26 (GIMPS, SETI@home, ChessBrain)

The remote host is missing updates announced in advisory GLSA 200411-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...