CVE-2000-0718

A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed...

CVE-2000-0722

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages...

CVE-2000-0718

CVE-2000-0718 affects MandrakeUpdate. A race condition enables local attackers to modify RPM files while they reside in /tmp before installation, compromising file integrity of packages. The NVD entry notes a low base score (1.2) with local attack vector and no confidentiality or availability imp...

CVE-2000-0718

A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed...

[RHSA-2000:062-03] glint symlink vulnerability

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: glint symlink vulnerability Advisory ID: RHSA-2000:062-03 Issue date: 2000-09-19 Updated on: 2000-09-19 Product: Red Hat Linux Keywords: glint symlink rpm Cross references: N/A...

CVE-2000-0722

The CVE-2000-0722 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier. It describes a local-privilege issue where an attacker can cause the installation of arbitrary RPM packages by pre-creating the /tmp/helix-install directory before the package installation sequence begins...

CVE-2000-0722

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages...

Helix Code Security Advisory - Helix GNOME Update

HELIX CODE, INC. SECURITY ADVISORY [email protected] Issue Date: 20 Aug 2000 PACKAGES AFFECTED: Helix GNOME Updater helix-update, versions 0.1 through 0.5 SYNOPSIS: A vulnerability in Helix GNOME Update allow non-root users to exploit world-writable permissions on /tmp, permitting arbitraril...

Trustix security advisory - apache-ssl

Hi Due to a typo in the rpm spec file for apache-ssl, /usr/sbin/httpsd on a Trustix system will be installed with mode 756 instead of 755, making a binary file that will be run by root world writable. It should not be necessary to explain why this is an extremely bad thing. How this bug slipped...

Linux news 26.06.00

Ядро 2.2.17pre6 Alan Cox анонсировал новую pre версию следующего стабильного ядра ветки 2.2. В ней исправлены некоторые ошибки и обновлен драйвер для контроллеров на AIC7xxx Подробнее: http://www.kernel.org Ядро 2.4.0test2-ac1 Вот и начат процесс по выпуску новых патчей для 2.4.0-test2 от Alana...

Security Advisory

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Piranha web GUI exposure Advisory ID: RHSA-2000:014-10 Issue date: 2000-04-18 Updated on: 2000-04-24 Product: Red Hat Linux Keywords: piranha remote CGI command Cross references: php -...

rpm_query CGI System Information Disclosure

The rpmquery CGI is installed. This CGI allows anyone who can connect to this web server to obtain the list of the installed RPMs. This allows an attacker to determine the version number of your installed services, hence making their attacks more accurate. %NASLMINLEVEL 70300 C Tenable Network...

PT-1999-1415 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: The issue is related to insecure directory permissions in the RPM distribution for PostgreSQL, allowing local users to gain privileges. This is achieved by reading a plaintext password...