100 matches found
PT-2011-1254
Name of the Vulnerable Software and Affected Versions File::Temp module for Perl affected versions not specified Description The issue is related to the is safe function in the File::Temp module for Perl, which does not properly handle symlinks. This can potentially allow a remote attacker to...
MDVA-2010:194 : boost
Due to a typo in the boost package in Mandriva 2010.1 some files in the lib64boost-static-devel were symlinked wrongly, this update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...
Mandriva Update for rsh MDVA-2008:095 (rsh)
Check for the Version of rsh OpenVAS Vulnerability Test Mandriva Update for rsh MDVA-2008:095 rsh Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
RHEL 4 / 5 : spamassassin (RHSA-2007:0492)
Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incomin...
Moderate: Red Hat Security Advisory: spamassassin security update
Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incomin...
mirrorselect symbolic links problem
Symlink problem on temporary files creation...
mpg123 -- buffer overflow in URL handling
Carlos Barros reports that mpg123 contains two buffer overflows. These vulnerabilities can potentially lead to execution of arbitrary code. The first buffer overflow can occur when mpg123 parses a URL with a user-name/password field that is more than 256 characters long. This problem can be...
GLSA-200407-01 : Esearch: Insecure temp file handling
The remote host is affected by the vulnerability described in GLSA-200407-01 Esearch: Insecure temp file handling The eupdatedb utility uses a temporary file /tmp/esearchdb.py.tmp to indicate that the eupdatedb process is running. When run, eupdatedb checks to see if this file exists, but it does...
[ GLSA 200407-01 ] Esearch: Insecure temp file handling
Gentoo Linux Security Advisory GLSA 200407-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Logcheck symbolic links problem
Symlink problem on temporary files handling...
Metamail symlink problem
Symlink problem in extcompose script...
mailmgr symbolic links problem
Symlink problem during temporary files creation...
Networker symlink problem
Symlink problem in shutdown script...
KisMAC multiple bugs
Ownership changing, symlink problem, uncommented shell-characters...
ProFTPD on Debian Linux postinst Installation Privilege Escalation
The following problems have been reported for the version of proftpd in Debian 2.2 potato: 1. There is a configuration error in the postinst script, when the user enters 'yes', when asked if anonymous access should be enabled. The postinst script wrongly leaves the 'run as uid/gid root'...
Debian glibc 2 symlink issue could allow arbitrary file overwriting
Overview Some versions of ld.so, the loader for shared libraries in UNIX/LINUX, do not properly clear risky environment variables, allowing a symlink attack to overwrite arbitrary files. Description LDDEBUGOUTPUT specifies a directory in which ld.so creates a file with a predictable name based on...
tar-symlink.txt
Title : GNU tar Tape ARchive symlinkvulnerability Author : Marco van Berkum Organisation : OBIT b.v. URL : http://www.obit.nl Email : [email protected] Date : 06-01-2001 The usefull program tar Tape ARchive is used by all UNIX, Linux and BSD versions around and is used to ARCHIVE files to disk o...
[RHSA-2000:062-03] glint symlink vulnerability
--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: glint symlink vulnerability Advisory ID: RHSA-2000:062-03 Issue date: 2000-09-19 Updated on: 2000-09-19 Product: Red Hat Linux Keywords: glint symlink rpm Cross references: N/A...
kscd vulnerability
good morning, sorry for not sending an advisory, but i don't have much time. : I think the exploit is well commented. regards, Sebastian mail: Permission denied. Detected symlink to /etc/ld.so.preload. Admin has been informed. exploituser@lucifer$ /tmp/boomshell root@lucifer...
