CVE-2008-3294: Improper Control of Generation of Code

src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it...

GNU make /tmp 漏洞

GNU make处理通过标准输入提供的makefile内容时存在一个漏洞。GNU make没有检查这些文件是否存在或是这些文件是否是符号连接，就在/tmp目录下创建文件，攻击者可以简单的创建一个指向系统其他文件的符号连接。攻击者可以以运行make用户的身份创建文件，如果这个用户是root，将会获得root权限。 GNU make 3.77-44 S.u.S.E. Linux 6.3 S.u.S.E. Linux 6.1 SuSE已经发布补丁程序： ftp://ftp.suse.com/pub/suse/i386/update for Intel processors...

MDKA-2007:054 : dkms

The dkms packages that shipped with Mandriva Linux 2007.0 and 2007.1 did not work with kernel versions of 2.6.21 and higer due to the use of an obsolete Makefile target. The updated packages fix this limitation. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated...

Fedora Core 5 : sendmail-8.13.7-2.fc5.1 (2006-837)

Tue Jul 18 2006 Thomas Woerner 8.13.7-2.fc5.1 - using new syntax for access database 177566 - fixed failure message while shutting down sm-client 119429 resolution: stop sm-client before sendmail - fixed method to specify persistent queue runners 126760 - removed patch backup files from...

SuSE Linux 6.4/7.0/7.1/7.2 Berkeley Parallel Make - Shell Definition Format String

// source: https://www.securityfocus.com/bid/3572/info Parallel Make pmake is a freely available version of the make program, originally distributed with Berkeley Unix. It is designed to execute Makefiles and build programs. pmake is not typically setuid root, although some Linux distributions...