636 matches found
Malware Information Sharing Platform Insecure Temporary File Creation Vulnerability
The Malware Information Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and analyzing cybersecurity events and malware. A security vulnerability exists in the app/Controller/TemplatesController.php file in MISP...
CVE-2016-5847
SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384...
CVE-2016-5847
CVE-2016-5847 describes a local privilege-escalation in SAPCAR (SAPCAR archive tool) caused by a TOCTOU race condition when changing permissions of extracted files. A local attacker who can place files in the extraction directory can replace an extracted file with a hard link to another user’s fi...
CVE-2016-5847
SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384...
The vulnerability of PHP software allows a malicious individual to compromise the integrity and accessibility of protected information.
The vulnerability in acinclude.m4, which is used in the PHP configuration script, allows a local user to replace arbitrary files by using an attack on the /tmp/phpglibccheck file, with symbolic links...
Amazon Linux AMI : sos (ALAS-2016-666)
An insecure temporary file use flaw was found in the way sos created certain sosreport files. A local attacker could possibly use this flaw to perform a symbolic link attack to reveal the contents of sosreport files, or in some cases modify arbitrary files and escalate their privileges on the...
CentOS Update for sos CESA-2016:0188 centos7
Check the version of sos SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882393";...
sos: Usage of predictable temporary files allows privilege escalation
An insecure temporary file use flaw was found in the way sos created certain sosreport files. A local attacker could possibly use this flaw to perform a symbolic link attack to reveal the contents of sosreport files, or in some cases modify arbitrary files and escalate their privileges on the...
sos security update
CentOS Errata and Security Advisory CESA-2016:0152 An updated sos package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base...
Scientific Linux Security Update : sos on SL6.x (noarch) (20160209)
An insecure temporary file use flaw was found in the way sos created certain sosreport files. A local attacker could possibly use this flaw to perform a symbolic link attack to reveal the contents of sosreport files, or in some cases modify arbitrary files and escalate their privileges on the...
RHEL 6 : sos (RHSA-2016:0152)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2016:0152 advisory. The sos package contains a set of tools that gather information from system hardware, logs and configuration files. The information can then be used...
Moderate: Red Hat Security Advisory: sos security and bug fix update
An updated sos package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
sos: Usage of predictable temporary files allows privilege escalation
An insecure temporary file use flaw was found in the way sos created certain sosreport files. A local attacker could possibly use this flaw to perform a symbolic link attack to reveal the contents of sosreport files, or in some cases modify arbitrary files and escalate their privileges on the...
Zarafa Collaboration Platform zarafa-autorespond Privilege Gain Vulnerability
Zarafa Collaboration Platform ZCP is a suite of open source email and calendar software from Zarafa, Netherlands. A security vulnerability exists in zarafa-autorespond in versions of ZCP prior to 7.2.1. A local attacker can exploit this vulnerability to gain privileges by performing a symbolic li...
IPTables-Parse 'IPTables/Parse.pm' Insecure Temporary File Creation Vulnerability
IPTables-Parse is a Perl extension for parsing iptables and ip6tables firewall rules. An insecure temporary file creation vulnerability exists in IPTables-Parse versions prior to 1.6. A local attacker can exploit this vulnerability to perform a symbolic link attack to overwrite arbitrary files in...
Sudo sudoedit Unauthorized Access Vulnerability
Sudo is a program developed by software developer Todd C. Miller for use on Unix-like operating systems that allows users to execute commands in a secure manner with special privileges. A security vulnerability exists in sudoedit in versions of Sudo prior to 1.8.15. Due to the program failing to...
Apple OS X Symbolic Link Attack Vulnerability
Apple OS X is the operating system used by the Apple family of machines. A symbolic link attack vulnerability exists in Apple OS X versions prior to 10.11.1. The vulnerability allows an attacker to perform an unspecified symbolic link attack via a crafted application to perform arbitrary write to...
Apport Denial of Service Vulnerability
Apport is a toolkit for Ubuntu that collects and gives feedback on error messages information that the operating system finds useful when an application crashes. A denial-of-service vulnerability exists in versions prior to Apport 2.19, which allows local users to cause a denial of service or...
CVE-2015-1338
kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...
Hardcoded credentials
kernelcrashdump in Apport before 2.19 allows local users to cause a denial of service disk consumption or possibly gain privileges via a 1 symlink or 2 hard link attack on /var/crash/vmcore.log...