openSUSE 10 Security Update : jhead (jhead-5899)

This update of jhead fixes several security problems : - CVE-2008-4575: buffer overflow in DoCommand - CVE-2008-4639: local symlink attack - CVE-2008-4640: DoCommand allowed deletion of arbitrary files - CVE-2008-4641: execution of arbitrary shell commands in DoCommand %NASLMINLEVEL 70300 C Tenab...

xen: insecure temporary file use in qemu-dm.debug

qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...

Moderate: Red Hat Security Advisory: xen security and bug fix update

Updated xen packages that resolve several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xen packages contain the Xen tools and management daemons needed to manage...

RHEL 5 : xen (RHSA-2009:0003)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0003 advisory. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was...

CUPS Privilege Escalation Exploit

/ cve-2008-5377.c CUPS http://jon.oberheide.org Usage: $ gcc cve-2008-5377.c -o cve-2008-5377.c $ ./cve-2008-5377 $ id uid=0root gid=1000vm ... Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-5377 pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a...

CVE-2008-5746

Sun SNMP Management Agent SUNWmasf 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files...

Code injection

Sun SNMP Management Agent SUNWmasf 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files...

CVE-2008-5746

CVE-2008-5746 affects Sun SNMP Management Agent (SUNWmasf) versions 1.4u2 through 1.5.4. The vulnerability allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files. Impact is privilege escalation and potential compromise of file integrity on affe...

CVE-2008-5746

Sun SNMP Management Agent SUNWmasf 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files...

FreeBSD Ports: ampache

The remote host is missing an update to the system as announced in the referenced advisory. VID 0ac68e68-d32b-11dd-b540-d1288664c17e OpenVAS Vulnerability Test $ Description: Auto generated from VID 0ac68e68-d32b-11dd-b540-d1288664c17e Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Code injection

pdfjam creates the 1 pdf90, 2 pdfjoin, and 3 pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2008-5743

pdfjam creates the 1 pdf90, 2 pdfjoin, and 3 pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2008-5743

pdfjam creates the 1 pdf90, 2 pdfjoin, and 3 pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2008-5743

The CVE-2008-5743 issue affects pdfjam and its scripts pdf90, pdfjoin, and pdfnup. The Red Hat advisories describe multiple untrusted search path/temporary file handling vulnerabilities that allow a local attacker to overwrite arbitrary files via a symlink attack in the presence of predictable te...

[ MDVA-2008:241 ] mailscanner

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVA-2008:241 http://www.mandriva.com/security/ Package : mailscanner Date : December 22, 2008 Affected: Corporate 4.0 Problem Description: Local users can use symlink attacks throughout a flaw on trend-autoupdate scri...

CVE-2008-5704

src/unittest.c in gpsdrive aka gpsdrive-scripts 2.10pre4 might allow local users to overwrite arbitrary files via a symlink attack on the /tmp/gpsdrive-unit-test/proc temporary file, a different vector than CVE-2008-4959 and CVE-2008-5380...

Code injection

gpsdrive aka gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/.smswatch or b /tmp/gpsdrivepos temporary file, related to 1 examples/gpssmswatch and 2 src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380...

CVE-2008-5703

gpsdrive aka gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/.smswatch or b /tmp/gpsdrivepos temporary file, related to 1 examples/gpssmswatch and 2 src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380...

CVE-2008-5703

gpsdrive aka gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/.smswatch or b /tmp/gpsdrivepos temporary file, related to 1 examples/gpssmswatch and 2 src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380...

CVE-2008-5706

The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/trigger.tmp temporary file...