Gentoo Security Advisory GLSA 201006-08 (nano)

The remote host is missing updates announced in advisory GLSA 201006-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201006-08 (nano)

The remote host is missing updates announced in advisory GLSA 201006-08. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Ruby 'FileUtils.remove_entry_secure()' Method Race Condition Vulnerability

Ruby is prone to race condition vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ruby-lang:ruby"; ifdescription...

Xxe

crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to 1 determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and 2 perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on...

FreeBSD crontab information leakage

==================================== FreeBSD crontab information leakage ==================================== For its implementation of the standard UNIX cron daemon, FreeBSD uses a version based off vixie-cron. This package is installed by default, and includes a setuid-root crontab binary to...

CVE-2011-0754

The SplFileInfo::getType function in the Standard PHP Library SPL extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack...

Cross site scripting

The SplFileInfo::getType function in the Standard PHP Library SPL extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack...

CVE-2011-0754

The CVE affects PHP’s SPL extension (SplFileInfo::getType) prior to PHP 5.3.4 on Windows, where symbolic links are not detected due to the lack of FILE_ATTRIBUTE_REPARSE_POINT checking. This can enable local symlink attacks via cross-platform stat structure differences. Remediation: upgrade to PH...

Fedora 12 : php-pear-CAS-1.1.3-1.fc12 (2010-15970)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

Fedora 13 : php-pear-CAS-1.1.3-1.fc13 (2010-15943)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

pyftpd Multiple Vulnerabilities

pyftpd is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mathematica Arbitrary File Overwriting Vulnerability (Linux)

The host is running Mathematica and is prone to arbitrary file overwriting vulnerability. OpenVAS Vulnerability Test $Id: secpodmathematicasymlinkvulnlin.nasl 5394 2017-02-22 09:22:42Z teissa $ Mathematica Arbitrary File Overwriting Vulnerability Linux Authors: Sooraj KS Copyright: Copyright c 20...

Mathematica Arbitrary File Overwriting Vulnerability - Linux

Mathematica is prone to arbitrary file overwriting vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1438

CVE-2010-1438 affects Web Application Finger Printer (WAFP) 0.01-26c3, which uses fixed /tmp pathnames for temporary files and directories. The root cause is improper handling of /tmp paths, enabling local users to: (1) cause a denial of service by pre-creating a file with an expected pathname, (...

CVE-2010-1438

Web Application Finger Printer WAFP 0.01-26c3 uses fixed pathnames under /tmp for temporary files and directories, which 1 allows local users to cause a denial of service application outage by creating a file with a pathname that the product expects is available for its own internal use, 2 allows...

Deliver race conditions

Multiple race conditions lead to symlink attacks and DoS conditions...

Bournal Privilege Escalation Vulnerability

This host is installed with Bournal and is prone to privilege escalation vulnerability OpenVAS Vulnerability Test $Id: gbbournalprivilegeescalationvuln.nasl 4919 2017-01-02 15:22:45Z cfi $ Bournal Privilege Escalation Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks...

Bournal < 1.4.1 Privilege Escalation Vulnerability

Bournal is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-0788

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...

Information disclosure

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...