Mandrake Security Advisory MDVSA-2009:062 (shadow-utils)

The remote host is missing an update to shadow-utils announced via advisory MDVSA-2009:062. OpenVAS Vulnerability Test $Id: mdksa2009062.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:062 shadow-utils Authors: Thomas Reinke Copyright: Copyright c 20...

[ MDVSA-2009:066 ] php

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:066 http://www.mandriva.com/security/ Package : php Date : March 5, 2009 Affected: 2008.0, 2008.1, 2009.0, Corporate 4.0 Problem Description: PHP 4.4.4, 5.1.6, and other versions, when running on Apache,...

[ MDVSA-2009:063 ] eog

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:063 http://www.mandriva.com/security/ Package : eog Date : March 2, 2009 Affected: 2008.1, 2009.0 Problem Description: Python has a variable called sys.path that contains all paths where Python loads modules...

Mandrake Security Advisory MDVSA-2009:047-1 (vim)

The remote host is missing an update to vim announced via advisory MDVSA-2009:047-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:053 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory MDVSA-2009:053. OpenVAS Vulnerability Test $Id: mdksa2009053.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:053 squirrelmail Authors: Thomas Reinke Copyright: Copyright c 20...

[ MDVSA-2009:051 ] libpng

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:051 http://www.mandriva.com/security/ Package : libpng Date : February 23, 2009 Affected: 2008.0, 2008.1, 2009.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Problem Description: A number of...

[ MDVSA-2009:048 ] epiphany

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:048 http://www.mandriva.com/security/ Package : epiphany Date : February 20, 2009 Affected: 2008.1, 2009.0 Problem Description: Python has a variable called sys.path that contains all paths where Python load...

[ MDVSA-2009:050-1 ] python-pycrypto

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:050-1 http://www.mandriva.com/security/ Package : python-pycrypto Date : February 23, 2009 Affected: 2009.0 Problem Description: A vulnerability have been discovered and corrected in PyCrypto ARC2 module...

[ MDVSA-2009:048-1 ] epiphany

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:048-1 http://www.mandriva.com/security/ Package : epiphany Date : February 20, 2009 Affected: 2009.0 Problem Description: Python has a variable called sys.path that contains all paths where Python loads...

[ MDVSA-2009:047 ] vim

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:047 http://www.mandriva.com/security/ Package : vim Date : February 20, 2009 Affected: 2008.1, 2009.0, Corporate 3.0, Corporate 4.0 Problem Description: Python has a variable called sys.path that contains al...

[ MDVSA-2009:043 ] gnumeric

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:043 http://www.mandriva.com/security/ Package : gnumeric Date : February 19, 2009 Affected: 2008.1, 2009.0, Corporate 3.0 Problem Description: Python has a variable called sys.path that contains all paths...

Dia Python插件使用不安全搜索路径漏洞

BUGTRAQ ID: 33448 CVECAN ID: CVE-2008-5984 Dia是开放源码的流程图软件。 Dia的Python插件使用了不可信任的搜索路径，在调用PySysSetArgv时Python向sys.path附加了空字符串。如果dia工作目录中的python文件名称与python脚本试图导入的文件名相同的话，就会导致在用户系统中执行任意代码。 GNOME Dia 0.96.1 厂商补丁： GNOME ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mandriva.com/en/download/...

[ MDVSA-2009:038 ] blender

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:038 http://www.mandriva.com/security/ Package : blender Date : February 16, 2009 Affected: 2008.1, 2009.0 Problem Description: Python has a variable called sys.path that contains all paths where Python loads...

[ MDVSA-2009:027 ] cups

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:027 http://www.mandriva.com/security/ Package : cups Date : January 24, 2009 Affected: 2009.0 Problem Description: A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local...

Code injection

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...

CVE-2009-0032

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...

CVE-2009-0032

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...

CVE-2009-0032

CVE-2009-0032 affects CUPS shipped with Mandriva Linux (2008.0, 2008.1, 2009.0) and Mandriva CS/MNF; a local symlink attack on the /tmp/pdf.log file lets local users overwrite arbitrary files. Root cause: insecure handling of temporary file creation via symlinks in CUPS. Impact: local privilege/e...

CVE-2009-0032

CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server CS 3.0 and 4.0, and Multi Network Firewall MNF 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file...

[ MDVSA-2009:011 ] virtualbox

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:011 http://www.mandriva.com/security/ Package : virtualbox Date : January 14, 2009 Affected: 2008.0, 2008.1, 2009.0 Problem Description: A vulnerability have been discovered and corrected in VirtualBox,...