372 matches found
Low: Red Hat Security Advisory: : Updated CVS packages fix minor security issue
Updated cvs packages closing a vulnerability that could allow cvs to attempt to create files and directories in the root file system are now available. CVS is a version control system frequently used to manage source code repositories. A flaw was found in versions of CVS prior to 1.11.10 where a...
CVE-2001-1409: Undefined Security Weakness
dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions 666, which allows local users to replace or create files in the root file system...
SRT2003-04-02-1735 - Progress PROSTARTUP root owned file read
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (3)
source: https://www.securityfocus.com/bid/3865/info CDRDAO is a freely available, open source CD recording software package available for the Unix and Linux Operating Systems. It is maintained by Andreas Mueller. When CDRDAO saves it's configuration to the .cdrdao file in a user's home directory,...
Redhat 7.0 local root (via uucp) (attempt 2)
Affects: RedHat 7.0 possibly others 28 Aug 2001 01:27:24 +1200 uucp vulnerability exposed to vendor 9 Nov 2001 07:14:15 +1300 this makewhatis vulnerability exposed to vendor /usr/sbin/makewhatis An earlier version1 of makewhatis had a fault in the handling of compressed files that allowed executi...
rlmadmin v3.8M view file symlink vulnerability
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Ministry-Of-Peace - Security Advisory 01 - 07th Sept 2001 rlmadmin v3.8M view file symlink vulnerability -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- Overview: --------- rlmadmin is a user management...
Catman file clobbering vulnerability Solaris 2.x
Solaris 2.7/2.8 catman temp file vulnerability. Larry W. Cashdollar Vapid Labs Date Published: 12/18/2000 Advisory ID: 11242000-02 Risk: Low Title: catman temp file vulnerability. Class: insecure temp file handling. Remotely Exploitable: no Locally Exploitable: Yes Vulnerability Description:...
KDE 1.1.2 KApplication configfile - Local Privilege Escalation (1)
KDE 1.1.2 KApplication configfile - Local Privilege Escalation 1 source: https://www.securityfocus.com/bid/1291/info The KDE configuration-file management has a bug which could result in root compromise. Due to insecure creation of configuration rc files via KApplication-class, local users can...
rm.racecondition
Synopsis: If root ever does "rm -rf /tmp/foo" for a directory structure not completely owned by root, a local user can delete all files that root can. Such deletions are common for a /tmp cleanup and b before creating a specific directory in /tmp/. Details: "rm -r" implementations Solaris 7, Gnu...
CVE-1999-0324
ppl program in HP-UX allows local users to create root files through symlinks...
