723 matches found
CVE-2014-1933
The 1 JpegImagePlugin.py and 2 EpsImagePlugin.py scripts in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes...
DEBIAN-CVE-2013-6456
The LXC driver lxc/lxcdriver.c in libvirt 1.0.1 through 1.2.1 allows local users to 1 delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; 2 create arbitrary nodes mknod via the virDomainDeviceAttach API and a symlink attack on /dev in th...
cPanel多个安全漏洞
cPanel是一款基于多种语言的空间管理面板，可通过域名来管理整个站点。 cPanel存在多个安全漏洞： 1，部分日志文件以全局可读权限创建，允许攻击者查看日志文件获取敏感信息。 2，提交给FormMail.pl的输入在重定向用户之前缺少校验，可重定向用户至任意WEB站点。 3，在Cpanel::API::Fileman中生成错误消息时Locale::Maketext::maketext存在错误，允许攻击者提交特制输入可执行任意代码。 4，在某些情况下会在HOME文件创建trackupload日志，可通过符号链接攻击覆盖文件。...
CVE-2014-1838
The 1 extractkeysfrompdf and 2 fillpdf functions in pdfext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf...
CVE-2014-1933
The 1 JpegImagePlugin.py and 2 EpsImagePlugin.py scripts in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes...
Qualcomm chown init scripts
Insecure owner/permission changes in init shell scripts CVE-2013-6124: During the device start-up phase, several init shell scripts are executed with root privileges to configure various aspects of the system. During this process, standard toolchain commands such as chown or chmod are used to,...
GLSA-201402-10 : PulseAudio: Insecure temporary file usage
The remote host is affected by the vulnerability described in GLSA-201402-10 PulseAudio: Insecure temporary file usage The pamakesecuredir function in core-util.c does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with th...
PulseAudio: Insecure temporary file usage
Background PulseAudio is a sound system for POSIX OSes. Description The pamakesecuredir function in core-util.c does not handle temporary files securely. Impact A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application...
GLSA-201311-17 : Perl: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201311-17 Perl: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Impact : A local attacker could cause a Denial of Service condition or...
Perl: Multiple vulnerabilities
Background Perl is Larry Wall’s Practical Extraction and Report Language. Description Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Impact A local attacker could cause a Denial of Service condition or perform symlink attacks...
GLSA-201310-14 : Groff: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201310-14 Groff: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Groff. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could perform symlink attacks ...
Groff: Multiple Vulnerabilities
Background GNU Troff Groff is a text formatter used for man pages. Description Multiple vulnerabilities have been discovered in Groff. Please review the CVE identifiers referenced below for details. Impact A context-dependent attacker could perform symlink attacks to overwrite arbitrary files wit...
Perl Parallel-ForkManager Module: Insecure temporary file usage
Background Parallel-ForkManager is a simple parallel processing fork manager for Perl. Description The Perl Parallel-ForkManager module does not handle temporary files securely. Impact A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user...
libipa_hbac, sssd security update
CentOS Errata and Security Advisory CESA-2013:1319 Updated sssd packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...
py-suds -- vulnerable to symlink attacks
SUSE reports: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/...
GLSA-201309-05 : pip: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201309-05 pip: Multiple vulnerabilities Multiple vulnerabilities have been discovered in pip. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could conduct a Man-in-the-Middle attack to...
pip: Multiple vulnerabilities
Background pip is a tool for installing and managing Python packages. Description Multiple vulnerabilities have been discovered in pip. Please review the CVE identifiers referenced below for details. Impact A remote attacker could conduct a Man-in-the-Middle attack to cause pip to execute arbitra...
SuSE 11.2 / 11.3 Security Update : tomcat6 (SAT Patch Numbers 8155 / 8156)
This update of tomcat6 fixes : - apache-tomcat-CVE-2012-3544.patch. bnc831119 - use chown --no-dereference to prevent symlink attacks on log bnc822177c7/prevents CVE-2013-1976 - Fix tomcat init scripts generating malformed classpath http://youtrack.jetbrains.com/issue/JT-18545 bnc804992 patch fro...
Solaris 10 Patch Cluster File Clobber
Solaris 10 patch cluster suffers from a file clobber vulnerability in /tmp. File clobbering vulnerability in Solaris 10 patch cluster 3/27/2013 Larry W. Cashdollar @larry0 Hello, The 147147-26 patch creates a CLEANUP file in /tmp that is vulnerable to symlink attacks: The contents of the file...
Solaris 10 Patch Cluster File Clobber
File clobbering vulnerability in Solaris 10 patch cluster 3/27/2013 Larry W. Cashdollar @larry0 Hello, The 147147-26 patch creates a CLEANUP file in /tmp that is vulnerable to symlink attacks: The contents of the file created in /tmp are: /sbin/sh:root@dev-unix-sec02 cat CLEANUP...