723 matches found
[SECURITY] [DSA 1068-1] New fbi packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1068-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 20th, 2006 http://www.debian.org/security/faq -...
DSA-1068-1 fbi - insecure temporary file
Bulletin has no description...
Buffer overflow
The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks...
CVE-2006-1390
CVE-2006-1390 affects NetHack 3.4.3-r1 and earlier, Falcon’s Eye 1.9.4a and earlier, and Slash’EM 0.0.760 and earlier on Gentoo Linux. The connected documents describe a local privilege escalation where a member of the games group can modify saved-game state or create/overwrite save files to exec...
CVE-2006-1390
The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks...
CVE-2005-3342
CVE-2005-3342 affects noweb up to version 2.10c and earlier, allowing local users to overwrite arbitrary files via symlink attacks on temporary files created by the scripts lib/toascii.nw and shell/roff.mm. Public analyses (Gentoo GLSA 200602-14, Debian DSA-968-1, Ubuntu USN-254-1) describe insec...
CVE-2005-3342: Undefined Security Weakness
noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in 1 lib/toascii.nw and 2 shell/roff.mm...
CVE-2005-3342
noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in 1 lib/toascii.nw and 2 shell/roff.mm...
CVE-2005-3342
noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in 1 lib/toascii.nw and 2 shell/roff.mm...
[SECURITY] [DSA 916-1] New Inkscape packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 916-1 [email protected] http://www.debian.org/security/ Martin Schulze December 7th, 2005 http://www.debian.org/security/faq -...
DSA-916-1 inkscape - buffer overflow
Bulletin has no description...
[SECURITY] [DSA 901-1] New gnump3d packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 901-1 [email protected] http://www.debian.org/security/ Martin Schulze November 19th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 883-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 818-1] New kdeedu packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 818-1 [email protected] http://www.debian.org/security/ Martin Schulze September 22nd, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 818-1] New kdeedu packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 818-1 [email protected] http://www.debian.org/security/ Martin Schulze September 22nd, 2005 http://www.debian.org/security/faq -...
DSA-818-1 kdeedu - insecure temporary files
Bulletin has no description...
bacula insecure temporary file creation
bacula insecure temporary file creation Vendor: http://www.bacula.org/ Advisory: http://www.zataz.net/adviso/bacula-09192005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerabilities ared due to insecure temporary files creations. They are symlink attacks...
CVE-2005-2995
bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on 1 the temporary file used by autoconf/randpass when openssl is not available, or 2 the mtx.PID temporary file in mtx-changer.in...
CVE-2005-2995
bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on 1 the temporary file used by autoconf/randpass when openssl is not available, or 2 the mtx.PID temporary file in mtx-changer.in...
CVE-2005-2995
CVE-2005-2995 affects Bacula (e.g., bacula-common/bacula 1.36.3 and earlier). The issue allows local users to read/modify sensitive files via symlink attacks on temporary files: (1) the autoconf/randpass temp file used when openssl is unavailable, and (2) the mtx.[PID] temporary file in mtx-chang...