PYSEC-2012-15

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

PYSEC-2012-15

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

CVE-2012-0878

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

CVE-2012-0878

CVE-2012-0878 affects Paste Script 1.7.5 and earlier. The root cause is improper setting of group memberships during execution with root privileges, which could allow a remote attacker to bypass file-access restrictions when a web application uses the local filesystem. Public details indicate the...

CVE-2012-0878: Undefined Security Weakness

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

[SECURITY] Fedora 17 Update: python-paste-script-1.7.5-4.fc17

Paster is pluggable command-line frontend, including commands to setup pack age file layouts Built-in features: Creating file layouts for packages. For instance a setuptools-ready file layout. Serving up web applications, with configuration based on paste.deploy...

Fedora Update for python-paste-script FEDORA-2012-2413

Check for the Version of python-paste-script OpenVAS Vulnerability Test Fedora Update for python-paste-script FEDORA-2012-2413 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

Fedora Update for python-paste-script FEDORA-2012-2418

Check for the Version of python-paste-script OpenVAS Vulnerability Test Fedora Update for python-paste-script FEDORA-2012-2418 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

Fedora Update for python-paste-script FEDORA-2012-2418

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for python-paste-script FEDORA-2012-2413

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : python-paste-script-1.7.5-4.fc15 (2012-2413)

This update fixes a security flaw with Paster that prevents it from properly dropping privileges when run as root. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

[SECURITY] Fedora 15 Update: python-paste-script-1.7.5-4.fc15

Paster is pluggable command-line frontend, including commands to setup pack age file layouts Built-in features: Creating file layouts for packages. For instance a setuptools-ready file layout. Serving up web applications, with configuration based on paste.deploy...

Information disclosure

Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Copy and Paste Information Disclosure Vulnerability."...

CVE-2012-0010

Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Copy and Paste Information Disclosure Vulnerability."...

CVE-2012-0010

CVE-2012-0010 affects Microsoft Internet Explorer 6–9, where copy-and-paste operations could disclose information from another domain or security zone via a crafted webpage (information disclosure). Multiple connected sources confirm a related MS12-010 update (2647516) addressing IE vulnerabiliti...

CVE-2012-0010: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 through 9 does not properly perform copy-and-paste operations, which allows user-assisted remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Copy and Paste Information Disclosure Vulnerability."...

CVE-2011-3953: Undefined Security Weakness

Google Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event, which has unspecified impact and remote attack vectors...

Ubuntu: Security Advisory (USN-1026-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for paste vulnerability USN-1026-1

Ubuntu Update for Linux kernel vulnerabilities USN-1026-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10261.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for paste vulnerability USN-1026-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 10.04 LTS : paste vulnerability (USN-1026-1)

It was discovered that Python Paste did not properly sanitize certain strings, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this ...