Mandriva Update for pulseaudio MDVSA-2010:124 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVSA-2010:124 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Linux Security Advisory : pulseaudio (MDVSA-2010:124)

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file CVE-2009-1299. This update fixes this issue. %NASLMINLEVEL 70300 C Tenable Network Security...

Mandriva Update for espeak MDVA-2010:168 (espeak)

Check for the Version of espeak OpenVAS Vulnerability Test Mandriva Update for espeak MDVA-2010:168 espeak Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for espeak MDVA-2010:168 (espeak)

Check for the Version of espeak OpenVAS Vulnerability Test Mandriva Update for espeak MDVA-2010:168 espeak Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for SDL12 MDVA-2010:149 (SDL12)

Check for the Version of SDL12 OpenVAS Vulnerability Test Mandriva Update for SDL12 MDVA-2010:149 SDL12 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Test if Audio Server installed and list access rights of /dev/audio

Test if Audio Server is installed and list access rights of /dev/audio. This Script tests if the following Audio-Servers are installed: esound, paudio, pulseaudio, artsd, phonon. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Mandriva Update for pulseaudio MDVA-2010:107 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVA-2010:107 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Mandriva Update for pulseaudio MDVA-2010:107 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVA-2010:107 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2129)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2131)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. This update also improves some latency...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2129)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

Code injection

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack. The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file. Remediation...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

CVE-2009-1299

PulseAudio 0.9.10–0.9.19 is affected by CVE-2009-1299 due to the pa_make_secure_dir insecure handling of temporary files, enabling local symlink attacks to overwrite arbitrary files. Advisories (Gentoo GLSA 201402-10, Debian DSA-2017-1, Mandriva MDVSA-2010:124) indicate the issue and recommend up...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

Debian DSA-2017-1 : pulseaudio - insecure temporary directory

Dan Rosenberg discovered that the PulseAudio sound server creates a temporary directory with a predictable name. This allows a local attacker to create a Denial of Service condition or possibly disclose sensitive information to unprivileged users. %NASLMINLEVEL 70300 C Tenable Network Security,...