Mandriva Update for R-base MDVSA-2008:198 (R-base)

Check for the Version of R-base OpenVAS Vulnerability Test Mandriva Update for R-base MDVSA-2008:198 R-base Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Prismstumbler 0.7.3 File Overwrite

I found a symlink vuln in this older program. Prismstumbler 0.7.3 is most often ran as root to utilize all of capabilities. Prismstumbler pst creates /tmp/.psintercom and /tmp/spotkoord.txt as default. Can be changed within preferences. srw-rw-rw- 1 root root 0 2009-04-02 00:44 .psintercom...

CVE-2008-6552

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

JHead multiple security vulnerabilities

Buffer overflow, symlink vulnerability, unfiltered shell characters vulnerability...

[Backports-security-announce] Security Update for virtualbox-ose

Michael Meskes uploaded new packages for virtualbox-ose which fixed the following security problem: Debian Bug 504149 Symlink vulnerability due to bad /tmp handling allowing an attacker to overwrite any files owned by the starting user of virtualbox. For the etch-backports distribution the proble...

DEBIAN-CVE-2008-4986

wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/env, b /tmp/sed, and c /tmp/referer-home.log temporary files, related to the 1 coqweb and 2 account.sh scripts...

CVE-2008-4987

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...

CVE-2008-4967

linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/bwk, b /tmp/zzz, and c /tmp/ggg temporary files, related to the 1 linuxtrade.bwkvol, 2 linuxtrade.wn, and 3 moneyam.helper scripts...

CVE-2008-4948

fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddjfest.tmp temporary file...

Gentoo Security Advisory GLSA 200410-16 (PostgreSQL)

The remote host is missing updates announced in advisory GLSA 200410-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200506-08 (GNU shtool)

The remote host is missing updates announced in advisory GLSA 200506-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-02 (MySQL)

The remote host is missing updates announced in advisory GLSA 200409-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200404-21 (samba)

The remote host is missing updates announced in advisory GLSA 200404-21. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200404-21 (samba)

The remote host is missing updates announced in advisory GLSA 200404-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-23 (kdebase, KDM)

The remote host is missing updates announced in advisory GLSA 200606-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200405-20 (MySQL)

The remote host is missing updates announced in advisory GLSA 200405-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ MDVSA-2008:198 ] R-base

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:198 http://www.mandriva.com/security/ Package : R-base Date : September 16, 2008 Affected: 2008.0, 2008.1 Problem Description: A symlink vulnerability was found in the javareconf script in R that allows loca...

CVE-2008-4097

MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed wh...

CVE-2008-3791

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file...

CVE-2008-2936

CVE-2008-2936 - Postfix local privilege escalation : Affects Postfix as shipped before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 20080814. On OSes that support hard links to symlinks, a local user can fail-dangerously append mail to a root-owned symlink’s target by creating a har...