Design/Logic Flaw

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH...

CVE-2009-0521

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH...

CVE-2009-0521: Exposure of Sensitive Information to an Unauthorized Actor

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH...

PT-2009-3174 · Adobe · Flash Player

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 9.x before 9.0.159.0 Adobe Flash Player versions 10.x before 10.0.22.87 Description: The issue allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe...

Ghostscript < 8.64 'gdevpdtb.c' Buffer Overflow Vulnerability

No description provided by source. Ghostscript is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting this issue allows remote attackers to overwrite a sensitive memory buffer with...

Ghostscript < 8.64 - 'gdevpdtb.c' Local Buffer Overflow

Ghostscript is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting this issue allows remote attackers to overwrite a sensitive memory buffer with arbitrary data, potentially allowing...

rPSA-2009-0021-1 sudo

rPath Security Advisory: 2009-0021-1 Published: 2009-01-29 Products: rPath Linux 2 Rating: Major Exposure Level Classification: Local Root Deterministic Privilege Escalation Updated Versions: sudo=conary.rpath.com@rpl:2/1.6.9p12-3.1-1 rPath Issue Tracking System:...

CVE-2008-4832: Improper Link Resolution Before File Access

rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under 1 /var/lock or 2 /var/run. NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require ...

rPath Linux symbolic links vulnerability

rapa-console init script symbolic links vulnerability...

rPSA-2008-0318-1 initscripts

rPath Security Advisory: 2008-0318-1 Published: 2008-11-12 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Major Exposure Level Classification: Local Root Deterministic Denial of Service Updated Versions:...

CVE-2008-4815

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH...

CVE-2008-4815

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH...

CVE-2008-4815

Adobe Reader/Acrobat affected: Unix/Linux versions up to 8.1.2 and earlier are vulnerable due to an insecure RPATH in the Adobe Reader binary, enabling a local attacker to gain privileges via a Trojan horse placed in an untrusted directory. Connected sources confirm the root cause as an untrusted...

rPSA-2008-0307-1 nfs-client nfs-server nfs-utils

rPath Security Advisory: 2008-0307-1 Published: 2008-10-30 Products: rPath Appliance Platform Linux Service 1 rPath Appliance Platform Linux Service 2 rPath Linux 1 rPath Linux 2 Rating: Minor Exposure Level Classification: Remote Vulnerability Updated Versions:...

rPSA-2008-0286-1 mono

rPath Security Advisory: 2008-0286-1 Published: 2008-09-29 Products: rPath Linux 2 Rating: Major Exposure Level Classification: Remote User Deterministic Vulnerability Updated Versions: mono=conary.rpath.com@rpl:2/1.2.6-5-0.1 References: https://vulners.com/cve/CVE-2008-3906 Description: Previous...

Linux Kernel BER Decoding Remote Buffer Overflow Vulnerability

CVE-2008-1673 The Linux Kernel is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue wil...

rPSA-2008-0217-1 vsftpd

rPath Security Advisory: 2008-0217-1 Published: 2008-07-08 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote Non-deterministic Denial of Service Updated Versions: vsftpd=conary.rpath.com@rpl:1/2.0.3-13.4-1 rPath Issue Tracking System:...

Mercurial 'patch.py'目录遍历漏洞

BUGTRAQ ID: 30072 CVE ID：CVE-2008-2942 CNCVE ID：CNCVE-20082942 Mercurial是一款分布式的版本控制工具。 Mercurial存在输入验证错误，远程攻击者可以利用漏洞进行目录遍历攻击，可能建立或者覆盖系统文件。 目前没有详细漏洞细节提供。 rPath rPath Linux 2 Mercurial Mercurial 1.0.17 可参考如下补丁： http://www.selenic.com/hg/rev/87c704ac92d4...