Gentoo Security Advisory GLSA 200909-07 (tkman)

The remote host is missing updates announced in advisory GLSA 200909-07. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200909-08 (cmus)

The remote host is missing updates announced in advisory GLSA 200909-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-09 (screenie)

The remote host is missing updates announced in advisory GLSA 200909-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-11 (gccxml)

The remote host is missing updates announced in advisory GLSA 200909-11. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200909-08 (cmus)

The remote host is missing updates announced in advisory GLSA 200909-08. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200909-09 (screenie)

The remote host is missing updates announced in advisory GLSA 200909-09. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Kitware GCC-XML 'find_flags'脚本不安全临时文件建立漏洞

Bugraq ID: 36318 CVE ID： CVE-2008-4957 GCC-XML是一款c++语法分析器,是gcc编译器的前端。 Kitware GCC-XML 'findflags'脚本在/tmp中不安全建立临时文件，本地攻击者可以利用漏洞通过符号链接覆盖系统中任意文件。 Kitware GCC-XML 0.9 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496391...

screenie symbolic links vulnerabilities

Temporary file /tmp/.screenie. is created in insecure way...

[ GLSA 200909-09 ] Screenie: Insecure temporary file usage

Gentoo Linux Security Advisory GLSA 200909-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 200909-07 ] TkMan: Insecure temporary file usage

Gentoo Linux Security Advisory GLSA 200909-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200909-08 : C* music player: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-200909-08 C music player: Insecure temporary file usage Dmitry E. Oboukhov reported that cmus-status-display does not handle the '/tmp/cmus-status' temporary file securely. Impact : A local attacker could perform symlink attacks t...

GLSA-200909-09 : Screenie: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-200909-09 Screenie: Insecure temporary file usage Dmitry E. Oboukhov reported that Screenie does not handle '/tmp/.screenie.' temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary...

GLSA-200909-10 : LMBench: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-200909-10 LMBench: Insecure temporary file usage Dmitry E. Oboukhov reported that the rccs and STUFF scripts do not handle '/tmp/sdiff.' temporary files securely. NOTE: There might be further occurances of insecure temporary file...

RedHat Security Advisory RHSA-2009:1339

The remote host is missing updates announced in advisory RHSA-2009:1339. The rgmanager package contains the Red Hat Resource Group Manager, which provides high availability for critical server applications in the event of system downtime. Multiple insecure temporary file use flaws were discovered...

C* music player: Insecure temporary file usage

Background The C Music Player cmus is a modular and very configurable ncurses-based audio player. Description Dmitry E. Oboukhov reported that cmus-status-display does not handle the "/tmp/cmus-status" temporary file securely. Impact A local attacker could perform symlink attacks to overwrite...

RedHat Security Advisory RHSA-2009:1341

The remote host is missing updates announced in advisory RHSA-2009:1341. The Cluster Manager cman utility provides services for managing a Linux cluster. Multiple insecure temporary file use flaws were found in fenceapcsnmp and ccstool. A local attacker could use these flaws to overwrite an...

RedHat Security Advisory RHSA-2009:1337

The remote host is missing updates announced in advisory RHSA-2009:1337. The gfs2-utils package provides the user-space tools necessary to mount, create, maintain, and test GFS2 file systems. Multiple insecure temporary file use flaws were discovered in GFS2 user level utilities. A local attacker...

TkMan: Insecure temporary file usage

Background TkMan is a graphical, hypertext manual page and Texinfo browser for UNIX. Description Dmitry E. Oboukhov reported that TkMan does not handle the "/tmp/tkman" and "/tmp/ll" temporary files securely. Impact A local attacker could perform symlink attacks to overwrite arbitrary files with...

RedHat Security Advisory RHSA-2009:1339

The remote host is missing updates announced in advisory RHSA-2009:1339. The rgmanager package contains the Red Hat Resource Group Manager, which provides high availability for critical server applications in the event of system downtime. Multiple insecure temporary file use flaws were discovered...

RedHat Security Advisory RHSA-2009:1337

The remote host is missing updates announced in advisory RHSA-2009:1337. The gfs2-utils package provides the user-space tools necessary to mount, create, maintain, and test GFS2 file systems. Multiple insecure temporary file use flaws were discovered in GFS2 user level utilities. A local attacker...