UBUNTU-CVE-2015-4155

GNU Parallel before 20150422, when using 1 --pipe, 2 --tmux, 3 --cat, 4 --fifo, or 5 --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4156

GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...

Arbitrary file deletion

GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...

UBUNTU-CVE-2015-4156

GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4155

GNU Parallel before 20150422, when using 1 --pipe, 2 --tmux, 3 --cat, 4 --fifo, or 5 --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4155

Affected software: GNU Parallel. The vulnerability CVE-2015-4155 affects versions before 20150422 where using (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo, or (5) --compress allows a local attacker to write arbitrary files via a symlink attack on a temporary file. Root cause: symlink manipulatio...

CVE-2015-4156

GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4156

CVE-2015-4156 concerns GNU Parallel before 20150522 (Nepal). When using (1) --cat or (2) --fifo with --sshlogin, a local attacker can write to arbitrary files via a symlink attack on a temporary file. Root cause: a symlink attack on a temporary file used during these options. Impact stated: local...

CVE-2015-4156

GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4155

GNU Parallel before 20150422, when using 1 --pipe, 2 --tmux, 3 --cat, 4 --fifo, or 5 --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4156

GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4155: Improper Link Resolution Before File Access

GNU Parallel before 20150422, when using 1 --pipe, 2 --tmux, 3 --cat, 4 --fifo, or 5 --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4156: Improper Link Resolution Before File Access

GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...

openSUSE Security Update : GNU parallel (openSUSE-2015-388)

GNU parallel was updated to 20150522 to complete a fix one security issue and augment a fix for another. The following vulnerabilities were fixed : - The security issue for --sshlogin + --fifo/--cat has been fixed. - After further security analysis the issue fixed in 20150422 also fixed the probl...

PT-2015-6435

Name of the Vulnerable Software and Affected Versions GNU Parallel versions prior to 20150422 Description The issue allows local users to write to arbitrary files via a symlink attack on a temporary file when using certain options, including --pipe, --tmux, --cat, --fifo, or --compress...

PT-2015-6436

Name of the Vulnerable Software and Affected Versions GNU Parallel versions prior to 20150522 Description The issue allows local users to write to arbitrary files via a symlink attack on a temporary file when using 1 --cat or 2 --fifo with --sshlogin. Recommendations For GNU Parallel versions pri...

IBM General Parallel File System Information Disclosure Vulnerability

IBM General Parallel File System GPFS is a scalable, highly available, high-performance enterprise file management system optimized for petabyte-scale storage management from IBM in the United States. A security vulnerability exists in the /usr/lpp/mmfs/bin/gpfs.snap file in IBM GPFS version 4.1....

CVE-2015-1890: Exposure of Sensitive Information to an Unauthorized Actor

/usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System GPFS 4.1 before 4.1.0.7 produces an archive potentially containing cleartext keys, and lacks a warning about reviewing this archive to detect included keys, which might allow remote attackers to obtain sensitive information by...

PT-2015-5489

Name of the Vulnerable Software and Affected Versions IBM General Parallel File System GPFS versions 4.1 through 4.1.0.6 Description The issue in IBM General Parallel File System GPFS allows remote attackers to obtain sensitive information by leveraging access to a technical-support data stream...

wild copy-exploits-vulnerability warning-the black bar safety net

0x00 Preface This is Project Zero on the articles, the original text of the Taming the wild copy: Parallel Thread Corruption of Links: http://googleprojectzero.blogspot.com/2015/03/taming-wild-copy-parallel-thread.html 2 0 0 2 year, Apache Web serverfound and fixed a very fun bug. The server...