EUVD-2005-0611

Malware in sbrugna...

FreeBSD Ports: portupgrade-devel

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : portupgrade-devel -- lack of distfile checksums (b428e6b3-926c-11e1-8d7b-003067b2972c)

Ports security team reports : The portupgrade-devel port fetched directly from a git respository without checking against a known good SHA hash. This means that it is possible that packages built using this port may not match the one vetted by the maintainer. Users are advised to rebuild...

FreeBSD Ports: portupgrade-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID b428e6b3-926c-11e1-8d7b-003067b2972c OpenVAS Vulnerability Test $ Description: Auto generated from VID b428e6b3-926c-11e1-8d7b-003067b2972c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

portupgrade-devel -- lack of distfile checksums

Ports security team reports: The portupgrade-devel port fetched directly from a git respository without checking against a known good SHA hash. This means that it is possible that packages built using this port may not match the one vetted by the maintainer. Users are advised to rebuild...

FreeBSD Ports: portupgrade

The remote host is missing an update to the system as announced in the referenced advisory. VID 22f00553-a09d-11d9-a788-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: portupgrade

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : portupgrade -- insecure temporary file handling vulnerability (22f00553-a09d-11d9-a788-0001020eed82)

Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged local attacker to execute arbitrary commands or overwrite arbitrary files with the permissions of the user running portupgrade, typically root, by way of a symlink attack...

CVE-2005-0610

CVE-2005-0610 affects FreeBSD portupgrade prior to 20041226_2. It describes three symlink-related issues: (1) allowing local attackers to overwrite files and potentially replace packages to execute arbitrary code via pkg_fetch, (2) overwriting files through temporary files during port/package upg...

CVE-2005-0610

Multiple symlink vulnerabilities in portupgrade before 200412262 in FreeBSD allow local users to 1 overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkgfetch, 2 overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or 3 crea...

CVE-2005-0610

Multiple symlink vulnerabilities in portupgrade before 200412262 in FreeBSD allow local users to 1 overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkgfetch, 2 overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or 3 crea...

[SA14903] portupgrade Insecure Temporary File Creation Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: portupgrade Insecure Temporary File Creation...

portupgrade -- insecure temporary file handling vulnerability

Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged local attacker to execute arbitrary commands or overwrite arbitrary files with the permissions of the user running portupgrade, typically root, by way of a symlink attack...

portupgrade symbolic links problem

Insecure temporary files creation...