CVE-2013-1764

The Zypper aka zypp backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method...

CVE-2013-1764

The Zypper aka zypp backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method...

CVE-2013-1764

The CVE-2013-1764 issue affects the Zypper/zypp backend in PackageKit prior to 0.8.8. According to multiple sources (SUSE, UBUNTU, Debian, etc.), local users can downgrade packages via the install updates method, indicating a local escalation/precedent flaw that allows downgrades rather than enf...

Debian DSA-2829-1 : hplip - several vulnerabilities

Multiple vulnerabilities have been found in the HP Linux Printing and Imaging System: Insecure temporary files, insufficient permission checks in PackageKit and the insecure hp-upgrade service has been disabled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[SECURITY] [DSA 2829-1] hplip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2829-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2829-1 (hplip - several vulnerabilities)

Multiple vulnerabilities have been found in the HP Linux Printing and Imaging System: Insecure temporary files, insufficient permission checks in PackageKit and the insecure hp-upgrade service has been disabled. OpenVAS Vulnerability Test $Id: deb2829.nasl 6611 2017-07-07 12:07:20Z cfischer $...

DSA-2829-1 hplip - several

Bulletin has no description...

Apple Mac OS X PackageKit Format String Vulnerability

This host is missing an important security update according to Mac OS X 10.6.6 Update. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apple Mac OS X PackageKit Format String Vulnerability

This host is missing an important security update according to Mac OS X 10.6.6 Update. OpenVAS Vulnerability Test $Id: secpodmacosxpackagekitformatstringvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Apple Mac OS X PackageKit Format String Vulnerability Authors: Madhuri D Copyright: Copyright c 201...

Fedora Update for PackageKit FEDORA-2011-8943

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for PackageKit FEDORA-2011-8943

Check for the Version of PackageKit OpenVAS Vulnerability Test Fedora Update for PackageKit FEDORA-2011-8943 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora 15 : PackageKit-0.6.15-2.fc15 (2011-8943)

Upstream yum recently changed the behaviour when checking signatures on a package. The commit added a new configuration key which only affects local packages, but the key was set by default to False. - This meant that an end user could install a local unsigned rpm package using PackageKit without...

[SECURITY] Fedora 15 Update: PackageKit-0.6.15-2.fc15

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...

Apple Mac OS PackageKit Distribution脚本远程代码执行漏洞

BUGTRAQ ID: 45693 CVE ID: CVE-2010-4013 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X在“软件升级”检查期间处理distribution脚本时存在格式字符串错误，可造成内存破坏，在受影响的应用程序中执行任意代码或造成拒绝服务。 此漏洞源于PackageKit组件中的格式字符串错误。 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X...

CVE-2010-4013

Format string vulnerability in PackageKit in Apple Mac OS X 10.6.x before 10.6.6 allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service application crash via vectors related to interaction between Software Update and distribution scripts...

Format string

Format string vulnerability in PackageKit in Apple Mac OS X 10.6.x before 10.6.6 allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service application crash via vectors related to interaction between Software Update and distribution scripts...

CVE-2010-4013

CVE-2010-4013 covers a format-string vulnerability in Apple Mac OS X 10.6.x before 10.6.6, when PackageKit processes distribution scripts during Software Update. The root cause is a format-string error in PackageKit, allowing an attacker to cause an arbitrary code execution or a denial of service...

CVE-2010-4013

Format string vulnerability in PackageKit in Apple Mac OS X 10.6.x before 10.6.6 allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service application crash via vectors related to interaction between Software Update and distribution scripts...

Apple Releases OS X 10.6.6 With One Bug Fix, Mac App Store

Apple issued a fix for just one security vulnerability in the release of the latest version of its Mac OS X software on Thursday. OS X 10.6.6 fixes a flaw in PackageKit, a software installation and updating tool. The newest version of OS X is mostly notable for its inclusion of the Mac App Store...

Apple Releases Mac OS X v10.6.6

Apple has released Mac OS X v10.6.6 to address a vulnerability affecting PackageKit. Exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Apple article HT4498 and apply any...