OpenJDK temporary files have guessable file names (6721753)

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknow...

OpenJDK temporary files have guessable file names (6721753)

Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknow...

Ubuntu 7.10 / 8.04 LTS : amarok vulnerability (USN-657-1)

Dwayne Litzenberger discovered that Amarok created temporary files in an insecure way. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program. CVE-2008-3699. Note that Tenable Network Security has extracted the preceding...

Mandriva Linux Security Advisory : blender (MDVSA-2008:204)

Stefan Cornelius of Secunia Research reported a boundary error when Blender processed RGBE images which could be used to execute arbitrary code with the privileges of the user running Blender if a specially crafted .hdr or .blend file were openedCVE-2008-1102. As well, multiple vulnerabilities...

Ubuntu 8.10 : OpenJDK vulnerabilities (USN-713-1)

It was discovered that Java did not correctly handle untrusted applets. If a user were tricked into running a malicious applet, a remote attacker could gain user privileges, or list directory contents. CVE-2008-5347, CVE-2008-5350 It was discovered that Kerberos authentication and RSA public key...

CentOS 3 / 4 : texinfo (CESA-2006:0727)

New Texinfo packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Texinfo is a documentation system that can produce both online information and printed output from a single source...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : openoffice.org, openoffice.org-amd64 vulnerabilities (USN-677-1)

Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker might be able to execute arbitrary code with user privileges. CVE-2008-2237, CVE-2008-2238 Dmitry E. Oboukhov...

Ubuntu 8.04 LTS : openoffice.org-l10n update (USN-677-2)

USN-677-1 fixed vulnerabilities in OpenOffice.org. The changes required that openoffice.org-l10n also be updated for the new version in Ubuntu 8.04 LTS. Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a speciall...

Debian Security Advisory DSA 1764-1 (tunapie)

The remote host is missing an update to tunapie announced via advisory DSA 1764-1. OpenVAS Vulnerability Test $Id: deb17641.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1764-1 tunapie Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandriva Update for emacs MDVSA-2008:096 (emacs)

Check for the Version of emacs OpenVAS Vulnerability Test Mandriva Update for emacs MDVSA-2008:096 emacs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for blender MDVSA-2008:204 (blender)

Check for the Version of blender OpenVAS Vulnerability Test Mandriva Update for blender MDVSA-2008:204 blender Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Debian DSA-1764-1 : tunapie - several vulnerabilities

Several vulnerabilities have been discovered in Tunapie, a GUI frontend to video and radio streams. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1253 Kees Cook discovered that insecure handling of temporary files may lead to local denial of servi...

Mandriva Update for xen MDKSA-2007:203 (xen)

Check for the Version of xen OpenVAS Vulnerability Test Mandriva Update for xen MDKSA-2007:203 xen Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for emacs MDVSA-2008:096 (emacs)

Check for the Version of emacs OpenVAS Vulnerability Test Mandriva Update for emacs MDVSA-2008:096 emacs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for xen MDKSA-2007:203 (xen)

Check for the Version of xen OpenVAS Vulnerability Test Mandriva Update for xen MDKSA-2007:203 xen Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

DSA-1764-1 tunapie - several vulnerabilities

Bulletin has no description...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

Race condition

Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv01 through snv111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files...

CVE-2009-1207

CVE-2009-1207 describes a race condition in Solaris dircmp that could allow local users to overwrite arbitrary files via a symlink-based temporary-file attack. Connected documents confirm Solaris 10 (x86) and Solaris 10 (sparc) patches addressing this issue: 141015-01 for x86 and 141014-01 for SP...

Debian DSA-1760-1 : openswan - denial of service

Two vulnerabilities have been discovered in openswan, an IPSec implementation for linux. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4190 Dmitry E. Oboukhov discovered that the livetest tool is using temporary files insecurely, which could lead ...