333 matches found
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack. The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file. Remediation...
CVE-2009-1299
The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...
CVE-2009-1299
PulseAudio 0.9.10–0.9.19 is affected by CVE-2009-1299 due to the pa_make_secure_dir insecure handling of temporary files, enabling local symlink attacks to overwrite arbitrary files. Advisories (Gentoo GLSA 201402-10, Debian DSA-2017-1, Mandriva MDVSA-2010:124) indicate the issue and recommend up...
CVE-2009-1299
The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...
CVE-2009-1299
The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...
Debian DSA-2017-1 : pulseaudio - insecure temporary directory
Dan Rosenberg discovered that the PulseAudio sound server creates a temporary directory with a predictable name. This allows a local attacker to create a Denial of Service condition or possibly disclose sensitive information to unprivileged users. %NASLMINLEVEL 70300 C Tenable Network Security,...
[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory
------------------------------------------------------------------------ Debian Security Advisory DSA-2017-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory
------------------------------------------------------------------------ Debian Security Advisory DSA-2017-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2010 http://www.debian.org/security/faq -...
DSA-2017-1 pulseaudio - insecure temporary directory
Bulletin has no description...
Debian DSA-1838-1 : pulseaudio - privilege escalation
Tavis Ormandy and Julien Tinnes discovered that the pulseaudio daemon does not drop privileges before re-executing itself, enabling local attackers to increase their privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
MDVA-2009:208 : alsa-oss
The aoss script which redirect OSS sound output to Alsa contains an error which makes it fail to preload the correct library. Because of this error, old applications using OSS may fail to play sound if PulseAudio is not used. This update corrects this error. %NASLMINLEVEL 70300 @DEPRECATED@ This...
Mandrake Security Advisory MDVSA-2009:171 (pulseaudio)
The remote host is missing an update to pulseaudio announced via advisory MDVSA-2009:171. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:171 (pulseaudio)
The remote host is missing an update to pulseaudio announced via advisory MDVSA-2009:171. OpenVAS Vulnerability Test $Id: mdksa2009171.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:171 pulseaudio Authors: Thomas Reinke Copyright: Copyright c 2009...
Debian: Security Advisory (DSA-1838-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandrake Security Advisory MDVSA-2009:152 (pulseaudio)
The remote host is missing an update to pulseaudio announced via advisory MDVSA-2009:152. OpenVAS Vulnerability Test $Id: mdksa2009152.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:152 pulseaudio Authors: Thomas Reinke Copyright: Copyright c 2009...
Gentoo Security Advisory GLSA 200907-13 (pulseaudio)
The remote host is missing updates announced in advisory GLSA 200907-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Debian Security Advisory DSA 1838-1 (pulseaudio)
The remote host is missing an update to pulseaudio announced via advisory DSA 1838-1. OpenVAS Vulnerability Test $Id: deb18381.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1838-1 pulseaudio Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Ubuntu USN-804-1 (pulseaudio)
The remote host is missing an update to pulseaudio announced via advisory USN-804-1. OpenVAS Vulnerability Test $Id: ubuntu8041.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8041.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-804-1 pulseaudio Authors:...
Mandrake Security Advisory MDVSA-2009:152 (pulseaudio)
The remote host is missing an update to pulseaudio announced via advisory MDVSA-2009:152. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Gentoo Security Advisory GLSA 200907-13 (pulseaudio)
The remote host is missing updates announced in advisory GLSA 200907-13. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...