8906 matches found
CVE-2011-1920
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to 1 bsd.lib.mk and 2 bsd.prog.mk...
Ubuntu Update for php5 USN-1126-1
Ubuntu Update for Linux kernel vulnerabilities USN-1126-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11261.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for php5 USN-1126-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
[USN-1126-1] PHP vulnerabilities
========================================================================== Ubuntu Security Notice USN-1126-1 April 29, 2011 php5 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...
CVE-2011-0012
The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name...
Code injection
The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name...
CVE-2011-0012
SPICE Firefox plug-in spice-xpi (versions 2.4, 2.3, 2.2 and possibly others) is affected by a local-attack vulnerability where a symlink on a predictable usbrdrctl log file name could allow a local user to overwrite arbitrary files. Exploitation leads to file overwrite (no remote access). Remedia...
CVE-2011-0012
The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name...
USN-1113-1: Postfix vulnerabilities
It was discovered that the Postfix package incorrectly granted write access on the PID directory to the postfix user. A local attacker could use this flaw to possibly conduct a symlink attack and overwrite arbitrary files. This issue only affected Ubuntu 6.06 LTS and 8.04 LTS. CVE-2009-2939 Wiets...
Mandriva Update for php MDVSA-2011:069 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2011:069 php Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
[ MDVSA-2011:069 ] php
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:069 http://www.mandriva.com/security/ Package : php Date : April 8, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: It was discovered that the /etc/cron.d/php...
Mandriva Update for gdm MDVSA-2011:070 (gdm)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Linux Security Advisory : php (MDVSA-2011:069)
It was discovered that the /etc/cron.d/php cron job for php-session allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php CVE-2011-0441. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:...
Mandriva Update for php MDVSA-2011:069 (php)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
spice-xpi: symlink attack on usbrdrctl log file
The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name...
Cross site scripting
/etc/init.d/boot.localfs in the aaabase package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab...
CVE-2011-0461
CVE-2011-0461 affects the openSUSE/SUSE package aaa_base. The flaw is in /etc/init.d/boot.localfs and allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab. Affected products/versions are aaa_base in SUSE/OpenSUSE 11.2 prior to 11.2-43.48.1 and in OpenSUSE 11.3 pri...
CVE-2011-0461
/etc/init.d/boot.localfs in the aaabase package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab...
SuSE 10 Security Update : FUSE (ZYPP Patch Number 7362)
The following security issues were fixed in fuse and util-linux : - FUSE allowed local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem. CVE-2010-3879 - Avoid mountin...
