Gentoo Security Advisory GLSA 201006-08 (nano)

The remote host is missing updates announced in advisory GLSA 201006-08. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201006-08 (nano)

The remote host is missing updates announced in advisory GLSA 201006-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Mandriva Update for heartbeat MDVA-2010:160-1 (heartbeat)

Check for the Version of heartbeat OpenVAS Vulnerability Test Mandriva Update for heartbeat MDVA-2010:160-1 heartbeat Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Mandriva Update for heartbeat MDVA-2010:160-1 (heartbeat)

Check for the Version of heartbeat OpenVAS Vulnerability Test Mandriva Update for heartbeat MDVA-2010:160-1 heartbeat Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

1Click DVD To ipod DLL Hijacking Exploit (dvd43.dll)

Exploit for windows platform in category local exploits ==================================================== 1Click DVD To ipod DLL Hijacking Exploit dvd43.dll ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

MDVA-2010:160-1 : heartbeat

The heartbeat package in the 2010.0 release had wrong permissions and ownership for /usr/bin/clstatus this prevented it from working correctly. Also when peers were outdated heartbeat didn't failover gracefully. This update fixes both these issues. Update: Packages for 2009.0 and MES5 were missin...

MS Wins Court Order Against Botnet Waledac

A federal magistrate judge has recommended that Microsoft be given ownership of 276 internet addresses used to control “Waledac,” a massive botnet that the software company has been working to bring down. Read the full article. The Register...

MDVA-2010:160 : heartbeat

The heartbeat package in the 2010.0 release had wrong permissions and ownership for /usr/bin/clstatus this prevented it from working correctly. Also when peers were outdated heartbeat didn't failover gracefully. This update fixes both these issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

CVE-2010-0832

pammotd aka the MOTD module in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before 1.1.1-2ubuntu5 in PAM on Ubuntu 10.04 LTS allows local users to change the ownership of arbitrary files via a symlink attack on .cache in a user's home directory, related to "user...

Design/Logic Flaw

pammotd aka the MOTD module in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before 1.1.1-2ubuntu5 in PAM on Ubuntu 10.04 LTS allows local users to change the ownership of arbitrary files via a symlink attack on .cache in a user's home directory, related to "user...

CVE-2010-0832

pammotd aka the MOTD module in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before 1.1.1-2ubuntu5 in PAM on Ubuntu 10.04 LTS allows local users to change the ownership of arbitrary files via a symlink attack on .cache in a user's home directory, related to "user...

CVE-2010-0832

CVE-2010-0832 affects the PAM MOTD module (pam_motd) in libpam-modules before 1.1.0-2ubuntu1.1 on Ubuntu 9.10 and before 1.1.1-2ubuntu5 on Ubuntu 10.04 LTS. A local attacker can exploit a symlink attack on a user’s .cache (in conjunction with motd.legal-notice) to change ownership of arbitrary fi...

CVE-2010-0832

pammotd aka the MOTD module in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before 1.1.1-2ubuntu5 in PAM on Ubuntu 10.04 LTS allows local users to change the ownership of arbitrary files via a symlink attack on .cache in a user's home directory, related to "user...

MyImages Image file manager => upload shell

Exploit for php platform in category web applications =========================================== MyImages Image file manager = upload shell =========================================== + Date: 02/07/2010 + Author: MeGo + Tested ON :windows xP + MY Team : Team Hacker Egypt + CategorY : Webapps/0da...

kernel: GFS2: The setflags ioctl() doesn't check file ownership

The dogfs2setflags function in fs/gfs2/file.c in the Linux kernel before 2.6.34-git10 does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl request...

Fedora 11 : texlive-2007-47.fc11 (2010-8273)

Changes in this update: fixes for CVE-2010-0739 and CVE-2010-1440 adds missing defattr to filelists fixes directory ownership of /var/lib/texmf/web2c uses official tarball for jpatch fixes post/postun scriptlets Note that Tenable Network Security has extracted the preceding description block...

Fedora 13 : texlive-2007-51.fc13 (2010-8314)

Changes in this update: fixes for CVE-2010-0739 and CVE-2010-1440 adds missing defattr to filelists fixes directory ownership of /var/lib/texmf/web2c uses official tarball for jpatch fixes post/postun scriptlets Note that Tenable Network Security has extracted the preceding description block...

Fedora 12 : texlive-2007-48.fc12 (2010-8242)

Changes in this update: fixes for CVE-2010-0739 and CVE-2010-1440 adds missing defattr to filelists fixes directory ownership of /var/lib/texmf/web2c uses official tarball for jpatch fixes post/postun scriptlets Note that Tenable Network Security has extracted the preceding description block...

Mandriva Update for pulseaudio MDVSA-2010:124 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVSA-2010:124 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Linux Security Advisory : pulseaudio (MDVSA-2010:124)

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file CVE-2009-1299. This update fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security...