EUVD-2005-3780

Malware in sbrugna...

Gentoo Security Advisory GLSA 200511-19 (eix)

The remote host is missing updates announced in advisory GLSA 200511-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200511-19 (eix)

The remote host is missing updates announced in advisory GLSA 200511-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200511-19 : eix: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200511-19 eix: Insecure temporary file creation Eric Romang discovered that eix creates a temporary file with a predictable name. eix creates a temporary file in /tmp/eix..sync where is the process ID of the shell running eix...

CVE-2005-3785

Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX eix before 0.5.0pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program...

CVE-2005-3785

The CVE-2005-3785 issue affects eix (Ebuild IndeX) prior to 0.5.0_pre2, where a second-order symlink vulnerability in the eix-sync.in path allows a local user to overwrite arbitrary files via a symlink to the exi.X.sync temporary file, processed by diff-eix. Exploitation is local and depends on c...

[Full-disclosure] [ GLSA 200511-19 ] eix: Insecure temporary file creation

Gentoo Linux Security Advisory GLSA 200511-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

eix: Insecure temporary file creation

Background eix is a small utility for searching ebuilds with indexing for fast results. Description Eric Romang discovered that eix creates a temporary file with a predictable name. eix creates a temporary file in /tmp/eix..sync where is the process ID of the shell running eix. Impact A local...