145 matches found
phpCollab: Multiple vulnerabilities
Background phpCollab is a web-enabled groupware and project management software written in PHP. It uses SQL-based database backends. Description Multiple vulnerabilities have been found in phpCollab: rgod reported that data sent to general/sendpassword.php via the loginForm parameter is not...
Gentoo Security Advisory GLSA 200810-02 (portage)
The remote host is missing updates announced in advisory GLSA 200810-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200810-02 (portage)
The remote host is missing updates announced in advisory GLSA 200810-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo 'sys-apps/portage'搜索路径本地特权提升漏洞
BUGTRAQ ID: 31670 CVE ID：CVE-2008-4394 CNCVE ID：CNCVE-20084394 Gentoo是一款基于Linux的发行版本。 当Emerge使用eapi-2搜索查找ebuilds时EAPI-2没有正确处理，可导致以超级用户权限执行任意代码。 攻击者可以利用漏洞诱使管理员在部分Ebuilds上运行emerge命令。 Gentoo sys-apps/portage 2.1.4.4 Gentoo sys-apps/portage 2.1.3.11 Gentoo sys-apps/portage 2.1.3.10 可联系供应商获得最新补丁：...
CVE-2008-4394
Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the 1 ys-apps/portage, 2 net-mail/fetchmail, 3 app-editors/le...
Design/Logic Flaw
Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the 1 ys-apps/portage, 2 net-mail/fetchmail, 3 app-editors/le...
CVE-2008-4394
Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the 1 ys-apps/portage, 2 net-mail/fetchmail, 3 app-editors/le...
CVE-2008-4394
CVE-2008-4394 affects Gentoo Portage prior to 2.1.4.5. The issue arises because Portage and certain ebuilds load Python modules with the current working directory in Python’s search path, enabling a local attacker to execute arbitrary code if emerge is invoked from an untrusted directory. The vul...
GLSA-200810-02 : Portage: Untrusted search path local root vulnerability
The remote host is affected by the vulnerability described in GLSA-200810-02 Portage: Untrusted search path local root vulnerability The Gentoo Security Team discovered that several ebuilds, such as sys-apps/portage, net-mail/fetchmail or app-editors/leo execute Python code using 'python -c', whi...
Portage: Untrusted search path local root vulnerability
Background Portage is Gentoo's package manager which is responsible for installing, compiling and updating all packages on the system through the Gentoo rsync tree. Description The Gentoo Security Team discovered that several ebuilds, such as sys-apps/portage, net-mail/fetchmail or app-editors/le...
Gentoo Linux Portage privilege escalation
Relative shared library search path in suid application...
[ GLSA 200810-02 ] Portage: Untrusted search path local root vulnerability
Gentoo Linux Security Advisory GLSA 200810-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Gentoo Security Advisory GLSA 200705-20 (blackdown-jdk,blackdown-jre)
The remote host is missing updates announced in advisory GLSA 200705-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200404-01 (Portage)
The remote host is missing updates announced in advisory GLSA 200404-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200411-15 (OpenSSL)
The remote host is missing updates announced in advisory GLSA 200411-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200712-11 (portage)
The remote host is missing updates announced in advisory GLSA 200712-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200411-13 (portage gentoolkit)
The remote host is missing updates announced in advisory GLSA 200411-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200404-01 (Portage)
The remote host is missing updates announced in advisory GLSA 200404-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200712-11 (portage)
The remote host is missing updates announced in advisory GLSA 200712-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200411-13 (portage gentoolkit)
The remote host is missing updates announced in advisory GLSA 200411-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...