11 matches found
EUVD-2000-0106
Malware in sbrugna...
apcd-spv.org Cross Site Scripting vulnerability OBB-3053691
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Debian Linux 2.1 apcd Symlink Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/958/info A vulnerability exists in the apcd package, as shipped in Debian GNU/Linux 2.1. By sending the apcd process a SIGUSR1, a file will be created in /tmp called upsstat. This file contains information about the statu...
Debian 2.1 apcd符号链接漏洞
和Debian GNT/Linux 2.1一起发行的apcd软件包存在符号链接漏洞。当apcd进程接收到一个SIGUSR1信号时,会将其状态信息保存到/tmp/upsstat。然而由于这个文件没有被安全地打开,可能会导致符号链接攻击。 Debian GNU/Linux 2.1 该漏洞在0.6a.nr-4slink1版本中被修补,建议立刻升级apcd软件包。 Source archives: http://security.debian.org/dists/stable/updates/source/apcd0.6a.nr-4slink1.diff.gz MD5 checksum:...
CVE-2000-0107
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack...
CVE-2000-0107
The CVE-2000-0107 entry concerns the Linux apcd program, which is vulnerable to a local symlink attack that lets an authenticated local attacker modify arbitrary files. The root cause is improper handling of symlinks, enabling file overwrites via symlink manipulation. The available references con...
[SECURITY] New version of apcd released
Package: apcd Vulnerability type: symlink attack Debian-specific: no The apcd package as shipped in Debian GNU/Linux 2.1 is vulnerable to a symlink attack. If the apcd process gets a SIGUSR1 signal it will dump its status to /tmp/upsstat. However this file is not opened safely, which makes it a...
CVE-2000-0107
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack...
[SECURITY] New version of apcd released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman February 1, 2000 - ------------------------------------------------------------------------ Package: apcd Vulnerability type:...
Debian 2.1 - apcd Symlink
Debian 2.1 - apcd Symlink source: https://www.securityfocus.com/bid/958/info A vulnerability exists in the apcd package, as shipped in Debian GNU/Linux 2.1. By sending the apcd process a SIGUSR1, a file will be created in /tmp called upsstat. This file contains information about the status of the...
Debian 2.1 - apcd Symlink
source: https://www.securityfocus.com/bid/958/info A vulnerability exists in the apcd package, as shipped in Debian GNU/Linux 2.1. By sending the apcd process a SIGUSR1, a file will be created in /tmp called upsstat. This file contains information about the status of the APC device. This file is...