[Full-disclosure] iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability

Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability iDefense Security Advisory 10.11.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 11, 2006 I. BACKGROUND The Netscape Portable Runtime NSPR API allows compliant applications to use system facilities such as...

CVE-2006-4842

CVE-2006-4842 is documented as a local privilege-escalation in Netscape Portable Runtime (libnspr) where LIBNSPR prior to 4.6.3 allows the user to influence the log file via the NSPR_LOG_FILE environment variable. Evidence in connected docs shows Solaris-specific context: unpatched Solaris system...

devhelp, mozilla security update

CentOS Errata and Security Advisory CESA-2006:0329 Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the...

Solaris 9 (x86) : 117725-10

SunOS 5.9x86: NSPR 4.5.1 / NSS 3.9.5 / JS. Date this patch was last updated by Sun : Feb/07/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

PT-2006-7535 · Gentoo +3 · Gentoo Linux +7

Name of the Vulnerable Software and Affected Versions: libnspr4 versions affected versions not specified libnss3 versions affected versions not specified nss versions prior to 3.11.3 libnspr-dev versions affected versions not specified libnss-dev versions affected versions not specified...