[SECURITY] [DSA 735-1] New sudo packages fix pathname validation race

------------------------------------------------------------------------ Debian Security Advisory 735-1 [email protected] http://www.debian.org/security/ Michael Stone July 01, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 735-1] New sudo packages fix pathname validation race

------------------------------------------------------------------------ Debian Security Advisory 735-1 [email protected] http://www.debian.org/security/ Michael Stone July 01, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

DSA-735-1 sudo - pathname validation race

Bulletin has no description...

CVE-2002-1913

phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable...

sudo -- local race condition vulnerability

Todd C. Miller reports: A race condition in Sudo's command pathname handling prior to Sudo version 1.6.8p9 that could allow a user with Sudo privileges to run arbitrary commands. Exploitation of the bug requires that the user be allowed to run one or more commands via Sudo and be able to create...

CVE-2005-1420

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstrated using "%20" hex-encoded space...

CVE-2005-1420

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to determine the full pathname of the server via a request for an invalid page, as demonstrated using "%20" hex-encoded space...

CVE-2005-1420

CVE-2005-1420 affects Raysoft/Raybase Video Cam Server 1.0.0 beta. The vulnerability is an information disclosure where remote attackers can determine the full server pathname by requesting an invalid page using a hex-encoded space ("%20"). The provided documents do not specify exploit details be...

CVE-2005-0733

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...

CVE-2005-0864

The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request...

CVE-2005-1286

Unquoted Windows search path vulnerability in BitDefender 8 allows local users to prevent BitDefender from starting by creating a malicious C:\program.exe, possibly due to the lack of quoting of the full pathname when executing a process...

CVE-2005-0998

The WebLinks module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division by zero PHP error that leaks the full pathname of the server...

CVE-2005-1305

The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1353

The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1148

calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid 1 year or 2 month parameters, which leaks the full pathname and debug information...

CVE-2005-1355

includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801...

CVE-2005-1357

text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1001

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to 1 the Surveys module with the file parameter set to comments or 2 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message...

CVE-2005-1357

text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1355

CVE-2005-1355 affects includer.cgi in The Includer and enables remote attackers to read arbitrary files by supplying a full pathname in the argument (a directory traversal issue). The connected record for CVE-2005-0801 confirms the pattern: directory traversal via .. or a full pathname in the URL...