Mandriva Update for id3lib MDKSA-2007:180 (id3lib)

Check for the Version of id3lib OpenVAS Vulnerability Test Mandriva Update for id3lib MDKSA-2007:180 id3lib Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for wml MDVSA-2008:076 (wml)

Check for the Version of wml OpenVAS Vulnerability Test Mandriva Update for wml MDVSA-2008:076 wml Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Debian DSA-1764-1 : tunapie - several vulnerabilities

Several vulnerabilities have been discovered in Tunapie, a GUI frontend to video and radio streams. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1253 Kees Cook discovered that insecure handling of temporary files may lead to local denial of servi...

[SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 07, 2009 http://www.debian.org/security/faq -...

Gentoo Security Advisory GLSA 200903-35 (muttprint)

The remote host is missing updates announced in advisory GLSA 200903-35. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-35 (muttprint)

The remote host is missing updates announced in advisory GLSA 200903-35. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Design/Logic Flaw

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

CVE-2008-6552

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

CVE-2008-6552

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

CVE-2008-6552

CVE-2008-6552 affects Red Hat Cluster Suite components (Resource Group Manager rgmanager, gfs2-utils, and CMAN) on Fedora 9 and related packages. The vulnerability arises from symlink attacks in /tmp that allow local attackers to modify or overwrite arbitrary files, with impact on confidentiality...

Muttprint: Insecure temporary file usage

Background Muttprint formats the output of mail clients to a good-looking printing using LaTeX. Description Dmitry E. Oboukhov reported an insecure usage of the temporary file "/tmp/muttprint.log" in the muttprint script. Impact A local attacker could perform symlink attacks to overwrite arbitrar...

Gentoo Security Advisory GLSA 200903-18 (openswan)

The remote host is missing updates announced in advisory GLSA 200903-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-18 (openswan)

The remote host is missing updates announced in advisory GLSA 200903-18. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Shadow: Privilege escalation

Background Shadow is a set of tools to deal with user accounts. Description Paul Szabo reported a race condition in the "login" executable when setting up tty permissions. Impact A local attacker belonging to the "utmp" group could use symlink attacks to overwrite arbitrary files and possibly gai...

GLSA-200903-18 : Openswan: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200903-18 Openswan: Insecure temporary file creation Dmitry E. Oboukhov reported that the IPSEC livetest tool does not handle the ipseclive.conn and ipsec.olts.remote.log temporary files securely. Impact : A local attacker could...

Openswan: Insecure temporary file creation

Background Openswan is an implementation of IPsec for Linux. Description Dmitry E. Oboukhov reported that the IPSEC livetest tool does not handle the ipseclive.conn and ipsec.olts.remote.log temporary files securely. Impact A local attacker could perform symlink attacks to execute arbitrary code...

GLSA-200903-08 : gEDA: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200903-08 gEDA: Insecure temporary file creation Dmitry E. Oboukhov reported an insecure temporary file usage within the sch2eaglepos.sh script. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files...

gEDA: Insecure temporary file creation

Background gEDA is an Electronic Design Automation tool used for electrical circuit design. Description Dmitry E. Oboukhov reported an insecure temporary file usage within the sch2eaglepos.sh script. Impact A local attacker could perform symlink attacks to overwrite arbitrary files with the...

PDFjam: Multiple vulnerabilities

Background PDFjam is a small collection of shell scripts to edit PDF documents, including pdfnup, pdfjoin and pdf90. Description Martin Vaeth reported multiple untrusted search path vulnerabilities CVE-2008-5843. Marcus Meissner of the SUSE Security Team reported that temporary files are created...

Gentoo Security Advisory GLSA 200901-14 (scilab)

The remote host is missing updates announced in advisory GLSA 200901-14. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...