Mandrake Linux Security Advisory : xfsdump (MDKSA-2007:134)

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[Full-disclosure] [ MDKSA-2007:134 ] - Updated xfsdump packages fix unsafe temporary directory creation issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:134 http://www.mandriva.com/security/ Package : xfsdump Date : June 21, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: xfsfsr in xfsdump creates a .fsr temporary directory with insecure...

Directory traversal

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-2654

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-2654

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-2654

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-2654

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

CVE-2007-2654

CVE-2007-2654 concerns the xfsdump tool: the xfs_fsr component creates a .fsr temporary directory with insecure permissions, enabling local users to read or overwrite arbitrary files on xfs filesystems. This is confirmed by multiple connected sources (Mandriva/MDKSA-2007:134, SUSE SUSEVE- CVE map...

CVE-2007-2654

xfsfsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems...

Important: XFree86 security update

4.3.0-120.EL.0.1 - Add oracle detection to Imake. 4.3.0-120.EL - add cve-2007-1351.patch 234056 4.3.0-119.EL - Add int-overflow.patch 231684 - comment out requirement on fonts-base as that is an unreleased change. 4.3.0-118.EL - Add cve-2007-1003.patch 232996 4.3.0-117.EL - Make xfs depend on...

USN-263-1: Linux kernel vulnerabilities

A flaw was found in the module reference counting for loadable protocol modules of netfilter. By performing particular socket operations, a local attacker could exploit this to crash the kernel. This flaw only affects Ubuntu 5.10. CVE-2005-3359 David Howells noticed a race condition in the addkey...

Ubuntu 4.10 / 5.04 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-263-1)

A flaw was found in the module reference counting for loadable protocol modules of netfilter. By performing particular socket operations, a local attacker could exploit this to crash the kernel. This flaw only affects Ubuntu 5.10. CVE-2005-3359 David Howells noticed a race condition in the addkey...

Code injection

Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...

CVE-2006-0554

Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...

CVE-2006-0554

Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...

CVE-2006-0554: Undefined Security Weakness

Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data...

HP-UX PHSS_31178 : HP-UX Running xfs and stmkfont, Remote Unauthorized Access (HPSBUX01061 SSRT4773 rev.2)

s700800 11.00 X Font Server Patch : Potential security vulnerabilities have been reported with HP-UX running xfs and stmkfont. These vulnerabilities can be exploited to allow remote unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

HP-UX PHSS_31181 : HP-UX Running xfs and stmkfont, Remote Unauthorized Access (HPSBUX01061 SSRT4773 rev.2)

s700800 11.23 X Font Server Patch : Potential security vulnerabilities have been reported with HP-UX running xfs and stmkfont. These vulnerabilities can be exploited to allow remote unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

HP-UX Security patch : PHSS_28468

The remote host is missing HP-UX Security Patch number PHSS28468 . SSRT2429 Potential Security Vulnerability in xfs %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17038;...

HP-UX PHSS_31180 : HP-UX Running xfs and stmkfont, Remote Unauthorized Access (HPSBUX01061 SSRT4773 rev.2)

s700800 11.22 X Font Server Patch : Potential security vulnerabilities have been reported with HP-UX running xfs and stmkfont. These vulnerabilities can be exploited to allow remote unauthorized access to resources owned by group 'bin.'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...