Low: xorg-x11-server

Issue Overview: A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use this flaw to determine the existence of a file in a directory not accessible to the user, via a symbolic link attack. CVE-2011-4028 A race condition was found ...

xorg-x11-server security and bug fix update

1.10.6-1 - xserver 1.10.6 - Use git-style patch names - compsize.h, glxcmds.h: Copy from upstream git since they fell out of the upstream tarball 1.10.4-15 - Undo regression introduced in Patch8007 732467 1.10.4-14 - xserver-1.10.4-sync-revert.patch: Revert an edge-case change in IDLETIME that...

NVIDIA Drivers: Privilege escalation

Background The NVIDIA drivers provide X11 and GLX support for NVIDIA graphic boards. Description A vulnerability has been found in the way NVIDIA drivers handle read/write access to GPU device nodes, allowing access to arbitrary system memory locations. NOTE: Exposure to this vulnerability is...

RedHat Update for xorg-x11-server RHSA-2012:0939-04

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : xorg-x11-server (RHSA-2012:0939)

Updated xorg-x11-server packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...

Low: Red Hat Security Advisory: xorg-x11-server security and bug fix update

Updated xorg-x11-server packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...

Low: Red Hat Security Advisory: openssh security, bug fix, and enhancement update

Updated openssh packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

DEBIAN-CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

CVE-2012-2118

CVE-2012-2118 affects X.Org X11 / xorg-server 1.11 with a format-string vulnerability in LogVHdrMessageVerb() in os/log.c that could cause a denial of service or potentially allow arbitrary code execution via input device name. Public disclosures describe the vulnerability and multiple advisories...

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

Mac OS X 10.7.x < 10.7.4 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.4. The newer version contains numerous security-related fixes for the following components : - Login Window - Bluetooth - curl - HFS - Kernel - libarchive - libsecurity - libxml - LoginUIFramework - PHP - Quartz Compose...

Debian ‘x11-common’ Init script insecure temporary file creation vulnerability-vulnerability warning-the black bar safety net

Vulnerability causes Design errors The level of danger Low The impact of the system Debian x11-common 1:7.5+8 Not affected system Hazards A local attacker could exploit the vulnerability could elevate privileges or destruction of the system. Attack required conditions The attacker must have acces...

xorg-x11-server security and bug fix update

1.1.1-48.90.0.1.el5 - Added oracle-enterprise-detect.patch - Replaced 'Red Hat' in spec file 1.1.1-48.90 - cve-2011-4028.patch: File existence disclosure vulnerability. 1.1.1-48.88 - cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX -...

Debian 'x11-common' Init脚本不安全临时文件创建漏洞

Debian是一款基于linux内核的操作系统 init脚本"x11-common"不安全方式创建"/tmp/.X11-unix"和"/tmp/.ICE-unix"，攻击者可以通过符号链接进行攻击，可能获得root特权 0 Debian x11-common 1:7.5+8 厂商解决方案 Debian ----- 目前没有详细解决方案提供： http://packages.debian.org/sid/x11-common...

SuSE 10 Security Update : xorg-x11 (ZYPP Patch Number 7954)

This update of xorg-x11 fixes issues that could allow attackers using GLX opcodes to read access to arbitrary memory locations CVE-2010-4818. Additionally, a crash due to missing bounds checks in the the Glyph Render protocol have been fixed. CVE-2010-4819 Access to the X server by the attacker w...