4559 matches found
[ MDVSA-2009:047 ] vim
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:047 http://www.mandriva.com/security/ Package : vim Date : February 20, 2009 Affected: 2008.1, 2009.0, Corporate 3.0, Corporate 4.0 Problem Description: Python has a variable called sys.path that contains al...
[ MDVSA-2009:038 ] blender
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:038 http://www.mandriva.com/security/ Package : blender Date : February 16, 2009 Affected: 2008.1, 2009.0 Problem Description: Python has a variable called sys.path that contains all paths where Python loads...
[ MDVSA-2009:027 ] cups
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:027 http://www.mandriva.com/security/ Package : cups Date : January 24, 2009 Affected: 2009.0 Problem Description: A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local...
CVE-2009-0032
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...
Code injection
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...
CVE-2009-0032
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...
CVE-2009-0032
CVE-2009-0032 affects CUPS shipped with Mandriva Linux (2008.0, 2008.1, 2009.0) and Mandriva CS/MNF; a local symlink attack on the /tmp/pdf.log file lets local users overwrite arbitrary files. Root cause: insecure handling of temporary file creation via symlinks in CUPS. Impact: local privilege/e...
CVE-2009-0032: Improper Link Resolution Before File Access
CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...
[ MDVSA-2009:011 ] virtualbox
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:011 http://www.mandriva.com/security/ Package : virtualbox Date : January 14, 2009 Affected: 2008.0, 2008.1, 2009.0 Problem Description: A vulnerability have been discovered and corrected in VirtualBox,...
[ MDVSA-2008:246 ] kernel
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:246 http://www.mandriva.com/security/ Package : kernel Date : December 29, 2008 Affected: 2009.0 Problem Description: Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: The chipcomma...
[ MDVSA-2008:242 ] wireshark
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:242 http://www.mandriva.com/security/ Package : wireshark Date : December 15, 2008 Affected: 2008.1, 2009.0, Corporate 4.0 Problem Description: Two vulnerabilities were discovered in Wireshark. The first is ...
[ MDVSA-2008:209 ] pam_krb5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:209 http://www.mandriva.com/security/ Package : pamkrb5 Date : October 3, 2008 Affected: 2007.1, 2008.0, 2008.1 Problem Description: St©phane Bertin discovered a flaw in the pamkrb5 existingticket...
[ MDVSA-2008:198 ] R-base
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:198 http://www.mandriva.com/security/ Package : R-base Date : September 16, 2008 Affected: 2008.0, 2008.1 Problem Description: A symlink vulnerability was found in the javareconf script in R that allows loca...
[ MDVSA-2008:185 ] python-django
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:185 http://www.mandriva.com/security/ Package : python-django Date : September 3, 2008 Affected: 2007.1, 2008.0, 2008.1 Problem Description: A cross-site request forgery vulnerability was discovered in Djang...
[ MDVSA-2008:184 ] libtiff
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:184 http://www.mandriva.com/security/ Package : libtiff Date : September 3, 2008 Affected: 2007.1, 2008.0, 2008.1, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Drew Yaro of t...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:181 http://www.mandriva.com/security/ Package : ipsec-tools Date : August 28, 2008 Affected: 2007.1, 2008.0, 2008.1, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Two denial of service...
[ MDVSA-2008:175 ] yelp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:175 http://www.mandriva.com/security/ Package : yelp Date : August 20, 2008 Affected: 2008.0, 2008.1 Problem Description: A format string vulnerability was discovered in yelp after version 2.19.90 and before...
QEMU安全绕过漏洞
BUGTRAQ ID: 30604 CVE ID：CVE-2008-1945 CNCVE ID：CNCVE-20081945 QEMU是一款面向完整PC系统的开源仿真器。 QEMU不正确限制对部分功能的访问，本地攻击者可以利用漏洞绕过安全限制，执行未授权攻击。 QEMU没有正确处理针对可移动媒介的更改，允许客户操作系统用户通过使用diskformat读取宿主OS上的任意文件。通过在-usbdevice选项的参数可修改磁盘映像头字段数据而识别为不同的格式来读取文件。 MandrakeSoft Linux Mandrake 2008.1 x8664 MandrakeSoft Linux...
[ MDVSA-2008:147 ] - Updated pcre packages fix vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:147 http://www.mandriva.com/security/ Package : pcre Date : July 15, 2008 Affected: 2007.1, 2008.0, 2008.1 Problem Description: Tavis Ormandy of the Google Security Team discovered a heap-based buffer overfl...
[ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:087 http://www.mandriva.com/security/ Package : policykit Date : April 16, 2008 Affected: 2008.1 Problem Description: A format string vulnerability in the grant helper, in PolicyKit 0.7 and earlier, allows...