rPSA-2007-0172-1 tar

rPath Security Advisory: 2007-0172-1 Published: 2007-08-25 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Indirect User Deterministic Vulnerability Updated Versions: tar=/conary.rpath.com@rpl:devel//1/1.15.1-7.2-1 References: https://vulners.com/cve/CVE-2001-1267...

rPSA-2007-0161-1 dovecot

rPath Security Advisory: 2007-0161-1 Published: 2007-08-14 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote User Deterministic Privilege Escalation Updated Versions: dovecot=/conary.rpath.com@rpl:devel//1/1.0.3-0.1-1 References: https://vulners.com/cve/CVE-2007-4211...

rPSA-2007-0155-1 openssl openssl-scripts

rPath Security Advisory: 2007-0155-1 Published: 2007-08-10 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Local System User Non-deterministic Information Exposure Updated Versions: openssl=/conary.rpath.com@rpl:devel//1/0.9.7f-10.7-1...

rPSA-2007-0153-1 qt-x11-free

rPath Security Advisory: 2007-0153-1 Published: 2007-08-01 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: qt-x11-free=/conary.rpath.com@rpl:devel//1/3.3.4-5.9-1 References: https://vulners.com/cve/CVE-2007-338...

rPSA-2007-0147-1 tcpdump

rPath Security Advisory: 2007-0147-1 Published: 2007-07-20 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect System User Deterministic Unauthorized Access Updated Versions: tcpdump=/conary.rpath.com@rpl:devel//1/3.9.5-2.1-1 References:...

[Full-disclosure] rPSA-2007-0119-1 spamassassin

rPath Security Advisory: 2007-0119-1 Published: 2007-06-13 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: spamassassin=/conary.rpath.com@rpl:devel//1/3.2.1-0.1-1 References: https://vulners.com/cve/CVE-2007-2873...

rPSA-2007-0115-1 libexif

rPath Security Advisory: 2007-0115-1 Published: 2007-06-04 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: libexif=/conary.rpath.com@rpl:devel//1/0.6.15-0.1-1 References: https://vulners.com/cve/CVE-2007-2645...

rPSA-2007-0108-1 freetype

rPath Security Advisory: 2007-0108-1 Published: 2007-05-23 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: freetype=/conary.rpath.com@rpl:devel//1/2.1.10-5.2-1 References: https://vulners.com/cve/CVE-2007-2754...

rPSA-2007-0090-1 gimp

rPath Security Advisory: 2007-0090-1 Published: 2007-05-03 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: gimp=/conary.rpath.com@rpl:devel//1/2.2.8-8.3-1 References: https://vulners.com/cve/CVE-2007-2356...

rPSA-2007-0081-1 postgresql postgresql-server

rPath Security Advisory: 2007-0081-1 Published: 2007-04-24 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Deterministic Privilege Escalation Updated Versions: postgresql=/conary.rpath.com@rpl:devel//1/8.1.9-0.1-1...

rPSA-2007-0074-1 dovecot

rPath Security Advisory: 2007-0074-1 Published: 2007-04-18 Products: rPath Linux 1 Rating: Informational Exposure Level Classification: Local User Deterministic Information Exposure Updated Versions: dovecot=/conary.rpath.com@rpl:devel//1/1.0.0-0.1-1 References:...

rPath Linux rMake multiple security vulneraiblities

No description provided...

rPSA-2007-0021-1 bind bind-utils

rPath Security Advisory: 2007-0021-1 Published: 2007-01-25 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Remote Deterministic Denial of Service Updated Versions: bind=/conary.rpath.com@rpl:devel//1/9.3.4-0.1-1 bind-utils=/conary.rpath.com@rpl:devel//1/9.3.4-0.1-1 Reference...

Design/Logic Flaw

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges...

CVE-2007-0536

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges...

CVE-2007-0536

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges...

CVE-2007-0536: Undefined Security Weakness

The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges...

CVE-2007-0536

The CVE-2007-0536 issue affects rPath Linux 1: the rMake chroot helper fails to drop supplemental groups, causing packages to be installed with insecure permissions and potentially enabling local privilege escalation. Root cause: missing drop of supplemental groups in the chroot helper. Impact: l...

rPSA-2007-0019-1 gtk

rPath Security Advisory: 2007-0019-1 Published: 2007-01-25 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: gtk=/conary.rpath.com@rpl:devel//1/2.8.6-9.7-1 References:...

SquirrelMail Compose.PHP信息泄露和数据修改漏洞

SquirrelMail是一款基于PHP的WEB MAIL服务程序。 SquirrelMail不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞获得敏感信息或覆盖系统文件。 验证用户可以使用compose.php脚本覆盖随计变量，可能导致读取或覆盖用户参考文件或附件。 SquirrelMail SquirrelMail 1.4.7 SquirrelMail SquirrelMail 1.4.6 -rc1 SquirrelMail SquirrelMail 1.4.6 -cvs SquirrelMail SquirrelMail 1.4.6 SquirrelMail...