Gentoo Security Advisory GLSA 200606-22 (aRts)

The remote host is missing updates announced in advisory GLSA 200606-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200606-22 (aRts)

The remote host is missing updates announced in advisory GLSA 200606-22. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 7 Update: kdemultimedia-3.5.8-8.fc7

The K Desktop Environment KDE is a GUI desktop for the X Window System. The kdemultimedia package contains multimedia applications for KDE, including: kmid, a midi player kmix, an audio mixer arts, additional functionality for the aRts sound system krec, a recording tool kscd, an Audio-CD player...

[SECURITY] Fedora 7 Update: arts-1.5.8-4.fc7

arts analog real-time synthesizer is the sound system of KDE 3. The principle of arts is to create/process sound using small modules which do certain tasks. These may be create a waveform oscillators, play samples, filter data, add signals, perform effects like delay/flanger/chorus, or output the...

openSUSE 10 Security Update : arts (arts-1670)

The KDE soundserver aRts lacked checks around some setuid calls. This could potentially be used by a local attacker to gain root privileges. CVE-2006-2916 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

CVE-2007-4466

Multiple stack-based buffer overflows in Electronic Arts EA SnoopyCtrl ActiveX control NPSnpy.dll allow remote attackers to execute arbitrary code via unspecified methods and parameters...

Stack overflow

Multiple stack-based buffer overflows in Electronic Arts EA SnoopyCtrl ActiveX control NPSnpy.dll allow remote attackers to execute arbitrary code via unspecified methods and parameters...

CVE-2007-4466

Multiple stack-based buffer overflows in Electronic Arts EA SnoopyCtrl ActiveX control NPSnpy.dll allow remote attackers to execute arbitrary code via unspecified methods and parameters...

Electronic Arts SnoopyCtrl ActiveX control and plug-in stack buffer overflows

Overview The Electronic Arts SnoopyCtrl ActiveX control and plug-in contains multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Electronic Arts EA.com provides an ActiveX control and Netscape-style...

Unfixed XSS vulnerability at www.arts-accredit.org

Security researcher MaXWeL, has submitted on 19/05/2007 a cross-site-scripting XSS vulnerability affecting www.arts-accredit.org, which at the time of submission ranked 937296 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/05/2007. It is...

[slackware-security] arts

New aRts packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a possible security issue with artswrapper. The artswrapper program and the artsd daemon can be used to gain root privileges if artswrapper is setuid root and the system is running a 2.6.x kernel. Note that...

Slackware 10.0 / 10.1 / 10.2 / current : arts (SSA:2006-178-03)

New aRts packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a possible security issue with artswrapper. The artswrapper program and the artsd daemon can be used to gain root privileges if artswrapper is setuid root and the system is running a 2.6.x kernel. Note that...

GLSA-200606-22 : aRts: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200606-22 aRts: Privilege escalation artswrapper fails to properly check whether it can drop privileges accordingly if setuid fails due to a user exceeding assigned resource limits. Impact : Local attackers could exploit this...

aRts: Privilege escalation

Background aRts is a real time modular system for synthesizing audio used by KDE. artswrapper is a helper application used to start the aRts daemon. Description artswrapper fails to properly check whether it can drop privileges accordingly if setuid fails due to a user exceeding assigned resource...

Design/Logic Flaw

artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges...

CVE-2006-2916

artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges...

CVE-2006-2916

artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges...

CVE-2006-2916

The CVE-2006-2916 issue affects artswrapper in aRts running with setuid root on Linux 2.6.0+ where setuid’s return value is not checked, allowing a local user to escalate to root by preventing artsd from dropping privileges. The vulnerability arises from failing to verify setuid’s success, potent...

CVE-2006-2916

artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges...

Without a password to view the martial arts world list statistics user information-bug warning-the black bar safety net

With the 50bang this statistic for some time, the user information can be set freely statistical information is disclosed. But often go to the statistics of the station to see the statistical charts of people who might know a little, just click on the list of those sites, the more information it...