Debian Security Advisory DSA 2147-1 (pimd)

The remote host is missing an update to pimd announced via advisory DSA 2147-1. OpenVAS Vulnerability Test $Id: deb21471.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2147-1 pimd Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2147-1 : pimd - insecure temporary files

Vincent Bernat discovered that pimd, a multicast routing daemon, creates files with predictable names upon the receipt of particular signals. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

[SECURITY] [DSA 2147-1] Security update for pimd

------------------------------------------------------------------------- Debian Security Advisory DSA-2147-1 [email protected] http://www.debian.org/security/ Steve Kemp January 16, 2011 http://www.debian.org/security/faq -...

CVE-2011-0007

CVE-2011-0007 affects pimd, specifically version 2.1.5 and possibly earlier. The flaw allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack on pimd.dump (triggered by USR1) or pimd.cache (triggered by USR2). Debian’s DSA-2147-1 notes a fix in pimd 2.1.0-alpha29.1...

CVE-2011-0007

pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on 1 pimd.dump when a USR1 signal is sent, or 2 pimd.cache when USR2 is sent...