709 matches found
Debian: Security Advisory (DLA-2095-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2095-1 : storebackup security update
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that...
[SECURITY] [DLA 2095-1] storebackup security update
Package : storebackup Version : 3.2.1-1+deb8u1 CVE ID : CVE-2020-7040 Debian Bug : 949393 storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Local users can also create a plain file named...
CVE-2019-3692
The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version...
CVE-2019-3692
The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version...
Design/Logic Flaw
The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version...
CVE-2019-3692
CVE-2019-3692 affects the OpenSUSE/SUSE inn package and enables local privilege escalation from a normal user to root via symlink attacks. Affected packages/versions include SUSE Linux Enterprise Server 11 inn 2.4.2-170.21.3.1 and earlier; openSUSE Factory inn 2.6.2-2.2 and earlier; openSUSE Leap...
CVE-2020-7040
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that fi...
CVE-2020-7040
CVE-2020-7040 affects the StoreBackup tool (storeBackup.pl) up to version 3.5, where it relies on the /tmp/storeBackup.lock path. This allows local attackers to perform a symlink attack or create a plain file named /tmp/storeBackup.lock to block usage, potentially leading to privilege escalation ...
CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
DEBIAN-CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
Design/Logic Flaw
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
CVE-2013-4184
CVE-2013-4184 affects the Perl module Data::UUID from CPAN version 1.219, vulnerable to symlink attacks due to a fragile handling of temporary files. Multiple connected sources show vendor advisories and distro patches (e.g., Fedora advisory FEDORA-2024-3da8ed5be3 and Mageia/OpenVAS notices) conf...
CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks...
CVE-2011-3632
Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks...