Code injection

Mathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a symlink attack on 1 files within /tmp/MathLink/ or 2 /tmp/fonts$$.conf...

CVE-2010-2027

Mathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a symlink attack on 1 files within /tmp/MathLink/ or 2 /tmp/fonts$$.conf...

CVE-2010-2027

CVE-2010-2027 affects Mathematica 7 on Linux. The issue is a local vulnerability where a symlink attack can cause arbitrary file overwriting via targets under /tmp/MathLink/ or /tmp/fonts$$.conf, enabling a local attacker to modify files with potentially partial integrity impact and no confidenti...

CVE-2010-1626

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247...

Command injection

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247...

CVE-2010-1626

CVE-2010-1626 affects MySQL before 5.1.46; a local attacker can delete data and index files of another user’s MyISAM table via a symlink attack combined with DROP TABLE. This is distinct from CVE-2008-4098/7247. Remediation per connected advisories is to upgrade to a fixed MySQL version (e.g., 5....

CVE-2010-1626

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247...

CVE-2010-1626

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247...

Mandriva Update for samba MDVSA-2010:090-1 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDVSA-2010:090-1 samba Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mathematica Symlink Attack

"If you're doing anything technical, think Mathematica --..." http://www.wolfram.com/products/mathematica/index.html Mathematica7 on Linux uses the /tmp/MathLink directory in insecure ways. Mathematica creates or re-uses an existing /tmp/MathLink directory, and overwrites files within and follows...

Mandriva Update for samba MDVSA-2010:090 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDVSA-2010:090 samba Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for samba MDVSA-2010:090 (samba)

Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDVSA-2010:090 samba Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Code injection

Web Application Finger Printer WAFP 0.01-26c3 uses fixed pathnames under /tmp for temporary files and directories, which 1 allows local users to cause a denial of service application outage by creating a file with a pathname that the product expects is available for its own internal use, 2 allows...

Mandriva Linux Security Advisory : samba (MDVSA-2010:090-1)

Multiple vulnerabilies has been found and corrected in samba : client/mount.cifs.c in mount.cifs in smbfs in Samba does not verify that the 1 device name and 2 mountpoint strings are composed of valid characters, which allows local users to cause a denial of service mtab corruption via a crafted...

FreeBSD Ports: movemail

The remote host is missing an update to the system as announced in the referenced advisory. VID f6b6beaa-4e0e-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID f6b6beaa-4e0e-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Mandriva Update for emacs MDVSA-2010:083 (emacs)

Check for the Version of emacs OpenVAS Vulnerability Test Mandriva Update for emacs MDVSA-2010:083 emacs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for emacs MDVSA-2010:083 (emacs)

Check for the Version of emacs OpenVAS Vulnerability Test Mandriva Update for emacs MDVSA-2010:083 emacs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for nss_db MDVSA-2010:077 (nss_db)

Check for the Version of nssdb OpenVAS Vulnerability Test Mandriva Update for nssdb MDVSA-2010:077 nssdb Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Design/Logic Flaw

GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim...

DEBIAN-CVE-2010-1160

GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim...