CVE-2007-0536

The CVE-2007-0536 issue affects rPath Linux 1: the rMake chroot helper fails to drop supplemental groups, causing packages to be installed with insecure permissions and potentially enabling local privilege escalation. Root cause: missing drop of supplemental groups in the chroot helper. Impact: l...

CVE-2007-0536: Undefined Security Weakness

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges...

rPSA-2007-0019-1 gtk

rPath Security Advisory: 2007-0019-1 Published: 2007-01-25 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: gtk=/conary.rpath.com@rpl:devel//1/2.8.6-9.7-1 References:...

SquirrelMail Compose.PHP信息泄露和数据修改漏洞

SquirrelMail是一款基于PHP的WEB MAIL服务程序。 SquirrelMail不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞获得敏感信息或覆盖系统文件。 验证用户可以使用compose.php脚本覆盖随计变量，可能导致读取或覆盖用户参考文件或附件。 SquirrelMail SquirrelMail 1.4.7 SquirrelMail SquirrelMail 1.4.6 -rc1 SquirrelMail SquirrelMail 1.4.6 -cvs SquirrelMail SquirrelMail 1.4.6 SquirrelMail...

rPSA-2006-0162-1 kernel

rPath Security Advisory: 2006-0162-1 Published: 2006-08-31 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Root Deterministic Privilege Escalation Updated Versions: kernel=/conary.rpath.com@rpl:devel//1/2.6.17.11-1-0.1 References:...

[Full-disclosure] rPSA-2006-0122-1 kernel

rPath Security Advisory: 2006-0122-1 Published: 2006-07-07 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Deterministic Denial of Service Updated Versions: kernel=/conary.rpath.com@rpl:devel//1/2.6.16.24-0.1-1 References:...

rPSA-2006-0098-1 gdm

rPath Security Advisory: 2006-0098-1 Published: 2006-06-08 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Local System User Deterministic Privilege Escalation Updated Versions: gdm=/conary.rpath.com@rpl:devel//1/2.8.0.8-0.1-1 References:...

rPSA-2006-0082-1 vixie-cron

rPath Security Advisory: 2006-0082-1 Published: 2006-05-25 Products: rPath Linux 1 Rating: Critical Exposure Level Classification: Local Root Deterministic Privilege Escalation Updated Versions: vixie-cron=/conary.rpath.com@rpl:devel//1/4.1-5.2-1 References:...

[Full-disclosure] rPSA-2006-0080-1 postgresql postgresql-server

rPath Security Advisory: 2006-0080-1 Published: 2006-05-24 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Local System User Deterministic Vulnerability Updated Versions: postgresql=/conary.rpath.com@rpl:devel//1/8.1.4-1-0.1...