FreeBSD : rubygem-ruby_parser -- insecure tmp file usage (e1aa3bdd-839a-4a77-8617-cca439a8f9fc)

Michael Scherer reports : This is a relatively minor tmp file usage issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistributi...

Fedora 18 : blender-2.63a-8.fc18 (2012-13523)

Fix insucury file usage reported as CVE-2008-1103 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Gentoo Security Advisory GLSA 201206-17 (virtualenv)

The remote host is missing updates announced in advisory GLSA 201206-17. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-201206-17 : virtualenv: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-201206-17 virtualenv: Insecure temporary file usage The virtualenv.py script in virtualenv does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with the...

GLSA-201203-18 : Minitube: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-201203-18 Minitube: Insecure temporary file usage Tom Pruina reported that Minitube does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges...

Gentoo Security Advisory GLSA 201201-11 (fwbuilder)

The remote host is missing updates announced in advisory GLSA 201201-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

sysstat security, bug fix, and enhancement update

7.0.2-11 - Related: 716959 fix cve-2007-3852 - sysstat insecure temporary file usage 7.0.2-10 - Resolves: 716959 fix cve-2007-3852 - sysstat insecure temporary file usage 7.0.2-9 - Related: 622557 sar interrupt count goes backward 7.0.2-8 - Resolves: 694767 iostat doesn't report statistics for...

Gentoo Security Advisory GLSA 200909-10 (lmbench)

The remote host is missing updates announced in advisory GLSA 200909-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-09 (screenie)

The remote host is missing updates announced in advisory GLSA 200909-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-11 (gccxml)

The remote host is missing updates announced in advisory GLSA 200909-11. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

RHEL 3 / 4 / 5 : acroread (RHSA-2008:0641)

Updated acroread packages that fix various security issues are now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Acrobat Reader allows users to view and pri...

RedHat Security Advisory RHSA-2009:1154

The remote host is missing updates announced in advisory RHSA-2009:1154. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address...

Gentoo Security Advisory GLSA 200903-18 (openswan)

The remote host is missing updates announced in advisory GLSA 200903-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-24 (shadow)

The remote host is missing updates announced in advisory GLSA 200903-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD : verlihub -- insecure temporary file usage and arbitrary command execution (58997463-e012-11dd-a765-0030843d3802)

securityfocus reports : An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files,...

Gentoo Security Advisory GLSA 200812-12 (honeyd)

The remote host is missing updates announced in advisory GLSA 200812-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200812-12 (honeyd)

The remote host is missing updates announced in advisory GLSA 200812-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200812-14 (aview)

The remote host is missing updates announced in advisory GLSA 200812-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200812-13 : OpenOffice.org: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-13 OpenOffice.org: Multiple vulnerabilities Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files CVE-2008-2238 were discovered. Dmitry E. Oboukhov also reported an insecure temporary file...

OpenOffice.org: Multiple vulnerabilities

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files...