Gentoo Security Advisory GLSA 201402-10

Gentoo Linux Local Security Checks GLSA 201402-10 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

GLSA-201402-10 : PulseAudio: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-201402-10 PulseAudio: Insecure temporary file usage The pamakesecuredir function in core-util.c does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with th...

Mandriva Linux Security Advisory : pulseaudio (MDVSA-2010:124)

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file CVE-2009-1299. This update fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security...

Mandriva Update for mandriva-release MDVA-2010:124 (mandriva-release)

Check for the Version of mandriva-release OpenVAS Vulnerability Test Mandriva Update for mandriva-release MDVA-2010:124 mandriva-release Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2131)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. This update also improves some latency...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2129)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2129)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

BELL-CVE-2009-1299 CVE-2009-1299 does not affect BellSoft software

Bulletin has no description...

CVE-2009-1299

PulseAudio 0.9.10–0.9.19 is affected by CVE-2009-1299 due to the pa_make_secure_dir insecure handling of temporary files, enabling local symlink attacks to overwrite arbitrary files. Advisories (Gentoo GLSA 201402-10, Debian DSA-2017-1, Mandriva MDVSA-2010:124) indicate the issue and recommend up...

[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory

------------------------------------------------------------------------ Debian Security Advisory DSA-2017-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory

------------------------------------------------------------------------ Debian Security Advisory DSA-2017-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2010 http://www.debian.org/security/faq -...