Fedora 8 : optipng-0.6.2-1.fc8 (2008-9639)

The main reason for this update is a buffer overflow that is removed in this version, that could be triggered by processing specially crafted bitmap images .bmp. Aggregated upstream changelog: ============================== ++ Put back a speed optimization, accidentally removed in version 0.6,...

DEBIAN-CVE-2007-4998

cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination...

CVE-2007-1462

The CVE-2007-1462 issue affects the luci server component in Conga, where a password is stored in the Value attribute of a password field between page loads. This enables a password disclosure through page source viewing or similar operations; impact is partial confidentiality loss as noted, with...

Design/Logic Flaw

VMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine" option is enabled, preserves clipboard data on the guest operating system after it was deleted on the host operating system, which might allow local users to read clipboard contents by moving the foc...

CVE-2007-0473: Undefined Security Weakness

The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information /etc/sudoers contents by reading this file...

CVE-2005-4772: Undefined Security Weakness

liby2util in Yet another Setup Tool YaST in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013...

CVE-2005-1920: Improper Preservation of Permissions

The 1 Kate and 2 Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information...

CVE-2001-1515: Improper Preservation of Permissions

Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less restrictive permissions than intended...

CVE-2001-0195: Improper Preservation of Permissions

sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking...