Gentoo Security Advisory GLSA 200507-22 (sandbox)

The remote host is missing updates announced in advisory GLSA 200507-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200507-22 (sandbox)

The remote host is missing updates announced in advisory GLSA 200507-22. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-2449

CVE-2005-2449 describes a TOCTOU race condition in Gentoo’s sandbox prior to 1.2.11, enabling local users to create or overwrite arbitrary files via a symlink attack on sandboxpids.tmp. Connected advisories (Gentoo GLSA 200507-22) confirm a multiple TOCTOU issue in sandbox and give the remediatio...