[SECURITY] Fedora 15 Update: ember-0.6.0-5.fc15

Ember is a client for MMORPGs using the WorldForge system. It uses the Ogre 3D engine with CEGUI...

Fedora 15 : ember-0.6.0-5.fc15 (2011-3208)

Fix for CVE-2010-3355 bug 638381 This is just a rebuild to resolve a dependency conflict. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2010-3355

Ember 0.5.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3355

Ember 0.5.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Directory traversal

Ember 0.5.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3355

Removed by vendor...

CVE-2010-3355

Ember 0.5.7 places a zero-length directory name in LD_LIBRARY_PATH, allowing local users to gain privileges via a Trojan horse shared library in the current working directory. Root cause: malformed LD_LIBRARY_PATH handling. Impact: local privilege escalation with potential full compromise if expl...

CVE-2010-3355

Ember 0.5.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

PT-2010-4760

Name of the Vulnerable Software and Affected Versions Ember version 0.5.7 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to Ember placing a zero-length directory name in the LD LIBRARY PATH. Recommendatio...

CVE-2010-3355: Undefined Security Weakness

Ember 0.5.7 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...