EUVD-2017-9358

Malware in sbrugna...

Gentoo net-misc/vde elevation of privilege vulnerability

The Gentoo net-misc/vde package is a set of distributed virtual networking frameworks from the Gentoo Foundation. A security vulnerability exists in versions of the Gentoo net-misc/vde package prior to 2.3.2-r4. An attacker can exploit this vulnerability to gain root privileges by creating hard...

Gentoo app-admin/logstash-bin Package Privilege Gain Vulnerability

The Gentoo app-admin/logstash-bin package is a user management package from the Gentoo Foundation. A security vulnerability exists in the Gentoo app-admin/logstash-bin package in versions 5.6.x prior to 5.6.1 and versions prior to 5.5.3. A local attacker can exploit this vulnerability to gain...

Portage: Information disclosure

Background Portage is the default Gentoo package management system. Description Mike Frysinger reported that the "etc-update" utility uses temporary files with the standard umask, which results in the files being world-readable when merging configuration files in a default setup. Impact A local...

GLSA-200701-27 : ELinks: Arbitrary Samba command execution

The remote host is affected by the vulnerability described in GLSA-200701-27 ELinks: Arbitrary Samba command execution Teemu Salmela discovered an error in the validation code of 'smb://' URLs used by ELinks, the same issue as reported in GLSA 200612-16 concerning Links. Impact : A remote attacke...

Links: Arbitrary Samba command execution

Background Links is a web browser running in both graphics and text modes. Description Teemu Salmela discovered that Links does not properly validate "smb://" URLs when it runs smbclient commands. Impact A remote attacker could entice a user to browse to a specially crafted "smb://" URL and execu...

GLSA-200502-12 : Webmin: Information leak in Gentoo binary package

The remote host is affected by the vulnerability described in GLSA-200502-12 Webmin: Information leak in Gentoo binary package Tavis Ormandy of the Gentoo Linux Security Audit Team discovered that the Webmin ebuild contains a design flaw. It imports the encrypted local root password into the...