99 matches found
USN-1950-1: Light Display Manager vulnerability
It was discovered that Light Display Manager created .Xauthority files with incorrect permissions. A local attacker could use this flaw to bypass access restrictions...
Ubuntu Update for lightdm USN-1262-1
Ubuntu Update for Linux kernel vulnerabilities USN-1262-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12621.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for lightdm USN-1262-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
Ubuntu Update for update-manager USN-1284-2
Ubuntu Update for Linux kernel vulnerabilities USN-1284-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN12842.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for update-manager USN-1284-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...
DEBIAN-CVE-2011-4105
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...
CVE-2011-4105
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...
CVE-2011-4105
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...
CVE-2011-4105
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...
CVE-2011-4105
CVE-2011-4105 affects LightDM prior to 1.0.6. A local user can change the ownership of arbitrary files via a symlink attack on ~/.Xauthority. This is a local-privilege/teardown-style issue, with low CVSS in the base data but clear impact on file ownership. Remediation: upgrade LightDM to 1.0.6 or...
USN-1284-2: Update Manager regression
USN-1284-1 fixed vulnerabilities in Update Manager. One of the fixes introduced a regression for Kubuntu users attempting to upgrade to a newer Ubuntu release. This update fixes the problem. We apologize for the inconvenience. Original advisory details: David Black discovered that Update Manager...
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : update-manager vulnerabilities (USN-1284-1)
David Black discovered that Update Manager incorrectly extracted the downloaded upgrade tarball before verifying its GPG signature. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to replace arbitrary files. CVE-2011-3152 David Black...
USN-1284-1: Update Manager vulnerabilities
David Black discovered that Update Manager incorrectly extracted the downloaded upgrade tarball before verifying its GPG signature. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to replace arbitrary files. CVE-2011-3152 David Black...
CVE-2011-3154
DistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 does not properly create temporary files, which allows local users to obtain the XAUTHORITY file...
Ubuntu 11.10 : lightdm vulnerabilities (USN-1262-1)
It was discovered that Light Display Manager incorrectly handled privileges when reading .dmrc files. A local attacker could exploit this issue to read arbitrary configuration files, bypassing intended permissions. CVE-2011-3153 It was discovered that Light Display Manager incorrectly handled lin...
USN-1262-1: Light Display Manager vulnerabilities
It was discovered that Light Display Manager incorrectly handled privileges when reading .dmrc files. A local attacker could exploit this issue to read arbitrary configuration files, bypassing intended permissions. CVE-2011-3153 It was discovered that Light Display Manager incorrectly handled lin...
CVE-2011-4105
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...
Stack overflow
Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable...
CVE-2008-3229
Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable...
CVE-2008-3229
Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable...
CVE-2008-3229
Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable...
CVE-2008-3229: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable...