[SECURITY] [DSA 2213-1] x11-xserver-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2213-1 [email protected] http://www.debian.org/security/ Nico Golde April 8, 2011 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

CVE-2011-1492: Improper Input Validation

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets CSS stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain...

DSA-2213-1 x11-xserver-utils - missing input sanitizing

Bulletin has no description...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : x11-xserver-utils vulnerability (USN-1107-1)

Sebastian Krahmer discovered that the xrdb utility incorrectly filtered crafted hostnames. An attacker could use this flaw with a malicious DHCP server or with a remote xdmcp login and execute arbitrary code, resulting in root privilege escalation. Note that Tenable Network Security has extracted...

USN-1107-1: x11-xserver-utils vulnerability

Sebastian Krahmer discovered that the xrdb utility incorrectly filtered crafted hostnames. An attacker could use this flaw with a malicious DHCP server or with a remote xdmcp login and execute arbitrary code, resulting in root privilege escalation...

PT-2011-1087 · Gnu +1 · Glibc-Devel +7

Name of the Vulnerable Software and Affected Versions: glibc versions 2.3.4 glibc-utils versions 2.3.4 glibc-common versions 2.3.4 glibc-devel versions 2.3.4 glibc-profile versions 2.3.4 glibc-headers versions 2.3.4 nptl-devel version 2.3.4 glibc versions prior to 2.15-r3 Description: The issue...

PT-2011-1089 · Gnu +1 · Glibc-Devel +7

Name of the Vulnerable Software and Affected Versions: glibc versions 2.3.4 glibc versions prior to 2.15-r3 glibc-utils versions 2.3.4 glibc-devel versions 2.3.4 glibc-common versions 2.3.4 glibc-profile versions 2.3.4 glibc-headers versions 2.3.4 nptl-devel version 2.3.4 Description: The issue...

CVE-2011-0001

CVE-2011-0001 affects the Linux SCSI Target Framework (tgt) tgtd daemon prior to version 1.0.14 (scsi-target-utils). The vulnerability is a double-free in iscsi_rx_handler (usr/iscsi/iscsid.c) that can cause memory corruption and a crash; remote attackers may trigger this via network/blob-related...

RHEL 5 / 6 : scsi-target-utils (RHSA-2011:0332)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0332 advisory. The scsi-target-utils package contains the daemon and tools to set up and monitor SCSI targets. Currently, iSCSI software and iSER targets are...

Important: Red Hat Security Advisory: scsi-target-utils security update

An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

scsi-target-utils security update

1.0.4-3.1 - fix the buffer overflow bug before iscsi login CVE-2011-0001...

Red Hat Linux stickiness of /tmp

Exploit for linux platform in category dos / poc Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provide seunshare, a setuid root utility from...

RedHat Linux - Stickiness of /tmp

from: http://marc.info/?l=full-disclosure&m=129842239022495&w=2 Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provide seunshare, a setuid root utili...

Red Hat Enterprise Linux seunshare Unsafe Implementation

Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provide seunshare, a setuid root utility from policycore-utils intended to make new filesystem...

RedHat Linux - Stickiness of tmp

RedHat Linux - Stickiness of tmp from: http://marc.info/?l=full-disclosure&m=129842239022495&w=2 Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provi...

UBUNTU-CVE-2011-1031

The fehuniquefilename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh temporary file, a different vulnerability than CVE-2011-0702...

CVE-2010-3910: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the returnapplicationlanguage function in include/utils/utils.php in vtiger CRM before 5.2.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the langcrm parameter to phprint.php or 2 the currentlanguage...

Solaris 9 (x86) : 118462-03

SunOS 5.9x86: modload Utils Patch. Date this patch was last updated by Sun : Sep/22/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Mandriva Update for xdg-utils MDVA-2010:191 (xdg-utils)

Check for the Version of xdg-utils OpenVAS Vulnerability Test Mandriva Update for xdg-utils MDVA-2010:191 xdg-utils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for xdg-utils MDVA-2010:191 (xdg-utils)

Check for the Version of xdg-utils OpenVAS Vulnerability Test Mandriva Update for xdg-utils MDVA-2010:191 xdg-utils Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...