4320 matches found
DEBIAN-CVE-2012-4417
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...
CVE-2012-4417
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...
CVE-2012-4417
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...
PT-2012-5388 · Red Hat · Glusterfs
Name of the Vulnerable Software and Affected Versions: GlusterFS version 3.3.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names. Recommendations: For GlusterFS version 3.3.0, consider restricting access to...
GlusterFS: insecure temporary file creation
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...
Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : munin vulnerabilities (USN-1622-1)
It was discovered that the Munin qmailscan plugin incorrectly handled temporary files. A local attacker could use this issue to possibly overwrite arbitrary files. This issue only affected Ubuntu 10.04 LTS, Ubuntu 11.10, and Ubuntu 12.04 LTS. CVE-2012-2103 It was discovered that Munin incorrectly...
Ubuntu Update for - xdiagnose USN-1591-1
Ubuntu Update for Linux kernel vulnerabilities USN-1591-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15911.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for - xdiagnose USN-1591-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...
Ubuntu 12.04 LTS : xdiagnose update (USN-1591-1)
Alec Warner discovered that xdiagnose improperly handled temporary files in welcome.py when creating user-initiated archive files. While failsafeX does not use the vulnerable code, this update removes this functionality to protect any 3rd party applications which import the vulnerable code. In th...
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : devscripts vulnerabilities (USN-1593-1)
Raphael Geissert discovered that the debdiff.pl tool incorrectly handled shell metacharacters. If a user or automated system were tricked into processing a specially crafted filename, a remote attacker could possibly execute arbitrary code. CVE-2012-0212 Raphael Geissert discovered that the...
USN-1593-1: devscripts vulnerabilities
Raphael Geissert discovered that the debdiff.pl tool incorrectly handled shell metacharacters. If a user or automated system were tricked into processing a specially crafted filename, a remote attacher could possibly execute arbitrary code. CVE-2012-0212 Raphael Geissert discovered that the...
USN-1591-1: xdiagnose update
Alec Warner discovered that xdiagnose improperly handled temporary files in welcome.py when creating user-initiated archive files. While failsafeX does not use the vulnerable code, this update removes this functionality to protect any 3rd party applications which import the vulnerable code. In th...
Ubuntu: Security Advisory (USN-1505-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandrake Linux Security Advisory : webmin (MDKSA-2001:016)
Previous versions of webmin would create temporary files insecurely on several occasions. This could be exploited by a local attacker to overwrite or create arbitrary files and possibly gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Mandrake Linux Security Advisory : ed (MDKSA-2000:076)
Alan Cox discovered that GNU ed a classed line editor tool creates temporary files unsafely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory MDKSA-2000:076. The text itself is copyrigh...
Mandrake Linux Security Advisory : sgml-tools (MDKSA-2001:030-1)
Insecure handling of temporary file permissions can lead to other users on a multi-user system being able to read the documents being converted. This is due to sgml-tools creating temporary files without any special permissions. The updated packages create a secure temporary directory first, whic...
Mandrake Linux Security Advisory : bash1 (MDKSA-2000:075)
The bash1 shell program has the same vulnerability that tcsh has and incorrectly creates temporary files without the OEXCL flag. This vulnerability does not exist in bash2 which uses the OEXCL flag when creating temporary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
Mandrake Linux Security Advisory : exmh (MDKSA-2001:015)
All versions of exmh prior to 2.3.1 use the /tmp directory for storing temporary files. This was done in an insecure manner as exmh did not check to ensure that nobody placed a symlink with the same name in /tmp in the meantime and thus was vulnerable to a symlink attack. This could lead to a...
Mandrake Linux Security Advisory : man (MDKSA-2000:015)
Internet Security Systems ISS X-Force has identified a vulnerability in the makewhatis Bourne shell script that ships with many Linux distributions. It is found in versions 1.5e and higher of man, and handles temporary files insecurely. Local users may gain a variety of privileges depending on th...
PT-2012-4793
Name of the Vulnerable Software and Affected Versions Crowbar versions 1.4 and earlier Description The issue is related to insecure handling of temporary files and predictable file names in the Crowbar Ohai plugin, allowing local users to execute arbitrary shell commands. Recommendations For...
