GLSA-200803-11 : Vobcopy: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-11 Vobcopy: Insecure temporary file creation Joey Hess reported that vobcopy appends data to the file '/tmp/vobcopy.bla' in an insecure manner. Impact : A local attacker could exploit this vulnerability to conduct symlink...

Dovecot mail_extra_groups setting is often used insecurely

mailextragroups=mail setting is often used insecurely to give Dovecot access to create dotlocks to /var/mail directory. If you don't use mboxes in /var/mail, make sure this setting is cleared. If you do use /var/mail mboxes and Dovecot gives permission errors without it, do one of the following i...

Vobcopy: Insecure temporary file creation

Background Vobcopy is a tool for decrypting and copying DVD .vob files to a hard disk. Description Joey Hess reported that vobcopy appends data to the file "/tmp/vobcopy.bla" in an insecure manner. Impact A local attacker could exploit this vulnerability to conduct symlink attacks and append data...

GLSA-200803-03 : Audacity: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-03 Audacity: Insecure temporary file creation Viktor Griph reported that the 'AudacityApp::OnInit' method in file src/AudacityApp.cpp does not handle temporary files properly. Impact : A local attacker could exploit this...

Audacity: Insecure temporary file creation

Background Audacity is a free cross-platform audio editor. Description Viktor Griph reported that the "AudacityApp::OnInit" method in file src/AudacityApp.cpp does not handle temporary files properly. Impact A local attacker could exploit this vulnerability to conduct symlink attacks to delete...

Debian: Security Advisory (DSA-620-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 916-1 (inkscape)

The remote host is missing an update to inkscape announced via advisory DSA 916-1. Several vulnerabilities have been discovered in Inkscape, a vector-based drawing program. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-3737 Joxean Koret discovered a...

Debian Security Advisory DSA 907-1 (ipmenu)

The remote host is missing an update to ipmenu announced via advisory DSA 907-1. OpenVAS Vulnerability Test $Id: deb9071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 907-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 023-1 (inn2)

The remote host is missing an update to inn2 announced via advisory DSA 023-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 090-1 (xtel)

The remote host is missing an update to xtel announced via advisory DSA 090-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 754-1 (centericq)

The remote host is missing an update to centericq announced via advisory DSA 754-1. Eric Romang discovered that centericq, a text-mode multi-protocol instant messenger client, creates some temporary files with predictable filenames and is hence vulnerable to symlink attacks by local attackers. Th...

Debian: Security Advisory (DSA-818-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 901-1 (gnump3d)

The remote host is missing an update to gnump3d announced via advisory DSA 901-1. Several vulnerabilities have been discovered in gnump3d, a streaming server for MP3 and OGG files. The Common Vulnerabilities and Exposures Project identifies the following problems: CVE-2005-3349 Ludwig Nussel...

Debian: Security Advisory (DSA-883-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1365-1 (id3lib3.8.3)

The remote host is missing an update to id3lib3.8.3 announced via advisory DSA 1365-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Debian Security Advisory DSA 1068-1 (fbi)

The remote host is missing an update to fbi announced via advisory DSA 1068-1. Jan Braun discovered that the fbgs script of fbi, an image viewer for the framebuffer environment, creates an directory in a predictable manner, which allows denial of service through symlink attacks. For the old stabl...

Debian: Security Advisory (DSA-1365-3)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1365-2 (id3lib3.8.3)

The remote host is missing an update to id3lib3.8.3 announced via advisory DSA 1365-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Debian: Security Advisory (DSA-916-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1365-2 (id3lib3.8.3)

The remote host is missing an update to id3lib3.8.3 announced via advisory DSA 1365-2. OpenVAS Vulnerability Test $Id: deb13652.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1365-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...